last executing test programs: 18m39.064647576s ago: executing program 2 (id=2857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x44, 0x8, 0x7f, '\x00', 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0xf5000000) 18m38.925894138s ago: executing program 2 (id=2859): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x80000000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) writev(r0, &(0x7f00000004c0), 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xffffff40}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008004) bind$alg(r2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3, 0x2, 0x3, 0x3, 0x2, 0x3}, 0x20) accept4(r2, 0x0, 0x0, 0x80000) r7 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f00000001c0)={0x10, 0x2}) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x800, 0x143182) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000040)={'full', 0x20, 0x8001, 0x20, 0x10000000fffff}, 0x2f) r11 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r11, 0x0, 0x0) 18m38.80439779s ago: executing program 2 (id=2861): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x38, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000380), 0x3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbb108004500003800000000000000fa0100007f0000017f0700000000000000807800"/61], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "cb2ab4cd006800", 'w\x00', "00007aeb", "a329ed15ba34bea4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "3812682c476904d3", "311d28a37eba8cf617ee7773cb4f9f56", "e265026a", "ff00"}, 0x28) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000001fd000000000000000000000200000005000100010000001e39a143486a82310bdd175000c33573b21799f1ab878e2f599364d87716fd1bc80fb68bd45ecb1ac7d037834a9ef3e1c9145abc9e8a8cecfc0707783b19c8fb5dd14a8348867875359c34d0d8b51f1d7f624d791c691ff95f0f4613c69f14e1184c14058b6768d9029128325be511eb12b1bc958843cd199a157e7efee90ff638cd7d2461dc563e457d47f52b32e51ac37acbbb"], 0x1c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f00000001c0)=[@release], 0xac, 0x0, &(0x7f0000000440)="d5d4238429c0e37b1b9fbbf1846face55481d003afdb2ba5f4647b7e9f4f775ae9e55b677ab25693a85b9627b9706481f36956c12b3e4fd0962c83aaa9f6e1b3a6a4147f276203b43402a62866358d471f34063c2c94d50c0ace1cbf347d12975796eb25d74fe85391c5b568cb854c88f96a6709700bd8207b1ab2721f82160b0a03130021bbdcbb6673ed0d843c60000362c9ede5d82cb902ff32f2dd7b4bcf30f83521bf3edb369884a5d6"}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="f2130000", @ANYRES16=r9, @ANYBLOB="39020000000000000000140000001c0007800c00040003000000000000000c0003000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'veth0_vlan\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r7, 0x80047453, &(0x7f0000000400)) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @loopback}, 'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) 18m38.461332734s ago: executing program 2 (id=2864): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x141140, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0x6, 0x6, 0xb) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe64, 0x7, @empty, 0x1}, 0x1c) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) 18m36.058621154s ago: executing program 2 (id=2867): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x0, 0x0) read(r7, &(0x7f0000000000)=""/256, 0x100) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xe056, 0x0, 0x3, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000000, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x801, 0x409f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) mkdirat(r6, &(0x7f00000000c0)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4210, r8, 0x2, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r9, &(0x7f0000000240)=""/157, 0x9d) mknodat$loop(r9, &(0x7f0000000100)='./file7/file0\x00', 0x80, 0x1) getdents(r9, 0x0, 0x0) 18m35.515329382s ago: executing program 2 (id=2868): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x144) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa4002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x2ffc, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7fbffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000041) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xd1, 0x6, 0x0, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x9, 0x6, 0x3) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) 18m18.880369785s ago: executing program 32 (id=2868): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x144) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa4002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a, 0x0, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x2ffc, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7fbffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000041) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xd1, 0x6, 0x0, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x9, 0x6, 0x3) r8 = fsmount(r7, 0x0, 0x0) openat$cgroup_int(r8, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) 17m57.372794258s ago: executing program 1 (id=3022): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) r0 = fsopen(0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async) r5 = fanotify_init(0x1, 0x101000) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x8}}, './cgroup\x00'}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe4) (async) r9 = getuid() sendmmsg$unix(r4, &(0x7f0000009dc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="72def5b28dac2069f1ea4d4c1cb28653e7fcf90d651b80ba6c6b050908bda64aec040de091e097c3ec6fbedad4e046773ae404290f65", 0x36}, {&(0x7f0000000540)="3398b7cc5651205d28d8f5a214ad581814f88fb0128030ad354cfe8ee1669f33ba915b57a03f30232ba8e2225578b339e38d9af7fcf05724b1153b5e4fc999e0fd75a0f89b16ff223f86bcb6a330c43c41296f24f9b7038f85010b9ae657f266f0494508abd08be269d048451a0567ff6bb69a65d9cf3c4f941874e30f7d71b7a374475c5b88ea616a04fac57300f6bc279d790271457d464697e86e16e9143e62c098b414dc93d9d17013c2e3c30368156fb702858a7e0588c60555462f425c4e8c005d9cb655aefce80d486e74309230925a57e31d4527b8c409c1290621206d2e1d76837bed13f4795a0f18", 0xed}, {&(0x7f0000000640)="099cb4fa193f8a0d4761ebd8a8891f054022890839249a27983c90af0391d39b9a97b3854452748309ab913dccc6b4b74723e22f98f369a56984c7b6a2a7843880f36737e6d9a244a3de290ebeedf42d863c7ea933be2face756dc7bfeeba19e4f403b67d94268f2b495d7344c38be6e16c520e39cc9d8edbd51ebaa5e561736bc571867dce5ab39b900c274e6b1072329a539e5cdca19e7c34d022d014fe6043464f1c9bbe1b819f9d5544731f5e678f627ced459aa708192e5fa11d417bb24364b7e9c00433321da2dc0e1b4b26cd1ddf825ed7e784787", 0xd8}, {&(0x7f0000000740)="b2f373055f79b2a8e411b209d7f186068f0f8f9e107a811ea34fe5acd8a92a0bccfca52bd4fdfa70dcd074f91cb81b798c3a0d3d414d34618e005e90844a2c34e34f89e3c7047386adbf3a4c003ec76693b09a612f95ccabd0337bc45379bc393e5e36b79e04944095b5ecda659e77e9e3375c14f03d89fb24dd31c6a65284700aa681", 0x83}], 0x4, &(0x7f0000000b40)=[@rights={{0x34, 0x1, 0x1, [r0, r3, r1, r5, r3, r6, r3, r1, r7, r1]}}, @cred={{0x18, 0x1, 0x2, {r2, r8}}}, @cred={{0x18, 0x1, 0x2, {r2, r9}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r4, r0, r0]}}, @cred={{0x18, 0x1, 0x2, {r2}}}], 0xac, 0x48810}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000c00)="d9a71da6af79d808e0", 0x9}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="39da983f1c6f9193f0b2f0e30efe1117889a31459119ccb7968362e6be4f2ac5f388cef1ece3", 0x26}, {&(0x7f0000001e80)="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", 0xff}], 0x4, 0x0, 0x0, 0x24004040}}, {{&(0x7f0000001fc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007380)=[{&(0x7f0000006180)="3ca3945e7e3f716e9e0fd468f27695389326b40c2820fb4eb62a4eb22705e5c8ab72e4e242428a5a5b8e694db98a97772f39b6ac0054448d049db816583102992e870fbb490430da0c9477a0818679d58c5aaf6474c3731067d29f3aacd5c5e0ea81656d058818c3ed33937de6cfb774769c1c2525ffedb59c418d9a9dc2a4ae13a42c11ed866b4cad0ce829df54b47180a668aaf0ff4a8374c21acdc3f50196756e7c2e82b20e6c6285042f22c49a7afc43ba60301d6176299dfc2f9fd0dcb631633db15a989bf545a13386c5a674b30f7c86f42513aa60ed8775e9206051ea62788e294d66fa91dfc25ddfbf0faa5101", 0xf1}, {&(0x7f0000006280)="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", 0x1000}, {&(0x7f0000007280)="36f3615dd4bd0134f595577e29cba9a9d30fa9cba6799e1b05c0477ecd7589a6c02e3e173ad770a86e6f296a11b0f9bae5bea2e6106fa975342307b3520d00039c793f010a6753b8a6a0bbe412931fe1413d4d61b12fcad50c9cc73c4e4bfff6b178cceea1a99bd9e00307cff8b9c25a3424b8c435aa596c6192ad967fcad981437fbca11aebe10606468952bdd158f8d3678f86b968804cdbef3600282e2ba4ca374617eb4a94889ba61e83fd5f0f44d7bdc759da073cc5b25d80af95c10763fcd6dfaacd0b1a8211afe5534acf7a2508a169b7e44c57185000637a799c68bef53f2366609b7e8c43", 0xe9}], 0x3, &(0x7f00000073c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r2, r9}}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r5, r7]}}], 0x50, 0x2004c880}}, {{&(0x7f0000007440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007580)=[{&(0x7f00000074c0)="1c7ae73396ff1fffd9e0399214963837e8d63aadcf163452d2a65a192a0c91bdea4e81a0131caa629562f65b5dd0af246fa2c5eb84ae72d6fd438817846524c1d40cfca7bfc2d75703da4f7355d486358f4dfb73995ede6d5fee7769295187818a4293666fcb4f14549b422bd542ea6bb879e1f8a05abd2d16a917a61e3fb8cbf8aed7554c7389ddbdd97568ac58ccc574f4a1b825bb6dc9d5b607579d723abba3aeb80cadf8df21e9ced3", 0xab}], 0x1, 0x0, 0x0, 0x20000010}}, {{0x0, 0x0, &(0x7f0000007600)=[{&(0x7f00000075c0)="f14a2ce7793f6698b956e4719673a5f09cf99de7da", 0x15}], 0x1, &(0x7f00000076c0)=[@cred={{0x18, 0x1, 0x2, {0x0, r8}}}, @cred={{0x18}}], 0x30, 0x4000800}}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f0000007700)="2b135eba382664882c8fba5b8e06bf5b2cb847826aeafd3cc9c074a2ae669a0a8673f655e75420caab108bea1921b8ce77ced10136100fcf35ff822f36574c5d7c9c2fb19d65d0307d83c90d43cb9ef13fbbe38a86a5e8d65e44e3", 0x5b}, {&(0x7f0000007780)="0ed275fdb58d4a377df711580fa0404495eae5fddee4cd205277eadefd302cafd8d5893bb529e91ba4747fd093cc71a6f1ff8db4da0b1273eccb986315f8a33e7fb0c0fd8bdac42d42c9b28d8264e06afd", 0x51}, {&(0x7f0000007800)="95cbf3b305597765c6ea62ed03", 0xd}, {&(0x7f0000007840)="33ab17695684c91deaf3653644a04c9e7f36bd", 0x13}, {&(0x7f0000007880)="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", 0x1000}, {&(0x7f0000008880)="b8446ade34f53e867eae249052ca91b17b169a505f4301a4c3aa4b87be16dc511c293f", 0x23}], 0x6, &(0x7f0000008940)=[@cred={{0x18, 0x1, 0x2, {0x0, r9}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {0x0, r8}}}], 0x48, 0x14}}, {{&(0x7f00000089c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000009cc0)=[{&(0x7f0000008a40)="71cc9843f6a1002406bd96538379381e4f111e492a495af0525a40c8e310ff54f4861c24cf98fba8b3af6b1f809a4f429d159ec86cb96f0248a91cde75470780aeb16c42f13f9a649be27307b50f2773392eb878276fb6a823dae973ab444316578d7958c5a08ed6163e4289e520c77cf7ff2a03f5fab3b209d13fe6311a374d107323f5ec35b3733e1f81ed013903937e0097d994447c4bb1405b1d07c82495bdb1675b353189e972295c85959e15619a648546d63d185a8f6e211f48501cbfa88e97d93f51459e5097baf8149b784c464dbc3efe692518b7fdc3fd5c543b626a00b8cbbe5e45103b3dcdf31fffe1aebca9745eee60c5f131c90cc3e4b14dcd13787e13c0bc69f358c76299d143d70411d0d951c10c65e7c7f813479a504b6da3d71ffe1bcbfea834888811a84013607833f3922b301cc32c08a361e4eaf81cde6b3af529be704fc9394198982784e33d3fe2c4468ee23239552fa636c51eadbe25cece7a39a07caad145b18cea3f70db305f665a7535a4ff018d89737def8b821ad7cf060567f30f101d2b503433a5a8e6473dfb1c7a1a3c6fdc59df325879b47736ee1b37654314fb6f9d30a571286c601bda45e7178db97da4d74d938be4bba1eb2196e6e321bc3d3fd39b44c091608f0446b7dcef8fe12ada7c9cf9ecd66634df3b8b09e28e7a618d6ff5e9b56edce4c8f60d5a83297d98b4efce7d72a144d1db9af2e1b26c9c240ef363b9c7a0cce7eca12ba394cc209f71df36f8650932dbc8402fa021e7663bc53cba36f389a5a47d29f8d08bdc54325f92967c4e5c3ef10092a0180bbe055e713c7fd5900e7e5bf62af88724b825840528728e50f6b0d682d96547b3e8efd0a8b2206ee46ebedd6ff818d52af2d6eb9928c28c3f33f6f7552ffe551de9546a210e23c3bf8ca121e344887507b09d2cef927358b4e2571428397c968116fcaf77926807a592a76def5e5ed2df881efe6f1be174bcc8b5e5b8e07ad4bd2dccfb068af8150f83e3e5a5e01b4a98edf2fc2470eed291d0058485f07c6a502eae6218dbb6a08d6bd6fe0d737f075493ced67e9538197e73204440fd279744f653d91d498ee3de0d05c918b1d80b3c42dabd4457447f79702e63c12bf27142e464db98857aaf45ab56ee19c6a954b8d8e52a382190f6995e895e6f3b883ee1c61a22257f92772b0b06b250eef265093d88112256edcda2a486fc6fb6e6617b7c7f871dd76c499361c68a2843e5cb2e7be1021742036cdc8745dedb8ac4167e5e7a5ffd4168d6ecb867ea8a805f1b1949f2f7cb06f81cdf9ef7db170c02f8c5d1e9dfc488baf73bf22139d86fc85fc8ba6b2b56ae5786b464b8753b6a97fe4e8a5963affb0520e597f9154c1356b078bd2f59847a07e7a1929dbbb4abe6833da8fe102875a4217839b64cc1810df7858c9d8bbbf70d0f1941e20ded29aae44b698f3d73ae3aa942ead43b1e85e43e25fd73f8b06add1ac89aaef0eaae98bb2cf97f1991df9c0410d90033aa7808e200230e3e58357f6685acdf3529a4d08be3333a72992d0a4665764352547d960b685e5ece11f3fc05186fdce14d43d0a5d1a56297058510b46e6e8b729e9a5a7a2e9b1cf16654cfd152c53c8eca58e306b395b6a63fd278f7f6812bc307d45b4ff3d390daf193beb7322aaa687c2b986bda1ea864334bdb892a5dfaee060f9427b1ea55ef0836170aedecc8a4133eb67b47b88a13de761d3bf47341276e5440c1f12576f28c72874554db8f4e444b68739acc275168a83dc67342b380ff3d20ed33dbd4eda39bcd5904d04edf863e178e0d813c141d23ffb3a1c1aed26b4bfb8a6d6968fe595523f772f8d08d1c9959a26cf1f97a82a97fec9dac8054d106f830a91ff5a48a7fb22dd5155e852327e35810af86261a0ed50cd25caaeda9a8ab251fb10ab807d14789b986ba834f7c14db02bc377c18a0d7db121e39f593254e0ce7ac63a6ee490489259cd24c9e900b9c5e9276b477e103157da9b4565574ad9cdf98bfeec8cfc9115580e09bff8f123c160df5b659840ae9c239ddfa566f90a1a96230caba20197d2db05a69a4ec710fa4317273c6747fab6cb377f1e8f80ae4f729bba255e2e3f9c23a511db1326abe206c847333f54874fdbcc61acfa46682bd8cc3f35760c41d656b1eca8d0236e6be1cba98765d92094b250a274e4f9de04979ad92c374aab4185936ea3d024a4a15c6cc18fa5e76088e6c0d1da07249d2609c4b7df48990207e3b6735ffb78936d8a72f1d192ea12b678b622007311e68e5ad3a411e281def4db4699717538cf78faeef7d67427b89748ec1d80834bb39d875b4e8e6f6ba9f76c10f23a32be17b0666c6f4868a4e156326d07cc4a6730bc06cd1cee9f64889c15ddfddfb26ff90cf190b591cd3152e8798d23418959b7b9a75dc07aa568923599f1b2a3e271462460bf93550cad587ecb923f803ff67a0abc022d8c79546d271a9424249ccffbd7aadd0fa74ced9d97beefe59f10d825e91b1467606f2ac7b9fa7244245671041a166f0f73e33eaef7a5f5924da2129e7d0130bc3ce8d6880f514c91d6604cbe598d48c8c09e0af9f275980a53e7dc43b6f8cb9598a82a3cbe41ebb526809e6e39f87eeb3263150036332bb677220a5bc12ad95d2b8e687a5fbb66ae95e1ec02ce921c257651ddbbfb0fc87d5e313def960f7ad48d38b39ed82441bde7161d7282bd1f0379166e2584cf615e1299c5c8a9afb0a507338b8232bc1abf3a3a8ff83bb4693ebddbf021ae66c4b8886a74b1e42dad2132b635ccfb4411b21b02c719d37d2f1f5a782329b429394ae508c34fc0ea9b1e87f5554fb24bf05c1890f9bc533217499bacbabc47c250098b6f668de553a9c98ca3ddf2f595b89fde80449996b8768a0fa11db6eb57da27bb2d508b9a3d130ab1758b118a0d5c8fe114b31cd194386d1384e38d5346d05b21570e9c20e5376e26eecd972da797632d8a93ce4a7f4ffed4ed3f7a188aa388af7cf8ca470637a4614eb4eb56f81fc496aa90663d9cd450b304befd3cb05ddb938fcff09a597b485cc10d1f319e7e7c4d72d5df4c02d0fa7a74a93c8598f62bc50bb3437c4764fe4c121866193b42b1599b2d33532ca18247e156320af8de1b225c210e431f588b113fbae50cf4f0462dc139edbcd31583a55a7edd05e761a24556b664913ebbad8eb6122a85c51b638da31083a63d59e3773ce6ab721f43bca68fc1a5c3204f05e8f02546c225b02fbbeb58638f86094b86cdf6c67c72b8fa193847fe40f488e12f78435350dd0a7e0a2c7384fc49d078175eddf9dd1c3ceccfd78ecdc8e3b1b4e677f21a97f76af4f7e142d636fdf4eeab048c55461d8d368405b07cd96ee6a06dffb4e9648aded7df107102d0a605ab979fedac914c8a6d66a9490d777e490149999cbe5e8952243bd03e297dd3223bd667caff94d998c26429c69cc807a86992a4b1578e715e2cac6379fd3beb32976161125ea934e1c9e353e6fe5e2c79cd10b06ba5ed61a7640d1e5effa06f44deeceefba5f4c5624e875bb0dfed27a7a2bc58f946f1579548c862d93911b03234c3eceb96e9f7233e0d436bca2356e2512702bf19579cde8df736780d6a2c5f0ce1d911d3ad96de489a20ad4c812cb73bf1cc8af21a9e34d40ce0421b7b6013d3595291f77c8a27ff76dd6c346f9768586d6cae8035cd78558db983d1ffe02d4d61912439dce7f0f6545e6f3839d0c77182890771eafebd5bb6d89f47354fe8f6518bb6a0313eb289f53fac1b4fe3b0b72112a177b9fddc6b7229c62a91afdb6c863d16eff53ee4738b4a6c5f1eb541491a93fef8a73c4cc65d07e8110c08067d56c21ec9e22209fd99a52db0f3639f93d6165c7946b909786473ca148b228d3cd1cfbda8564b4d3af3dd0ef9491ba7919fea0e3d346341bfc16d2afcd2be22221755958eeff7736a547ba6458076be8e46ec52f4d22cb87cc93a86cef6c4e92a427d34ca1235b800da2834cb1cb2b7704c9cbe2ec8adecfc09c40e6a2fa6a06c9660a990d98c307a2ac354e35a270d92897b7d27cc97fda59297510261c97aef854408209f798a2ed55f6f47024ee6064d96e7f65f9d17acd1bcc1febe431c4e3f895f83e4a3f8c693fed6d04bce31186e94df178d3bbcccb668b49855105bc815ff1c8e83e6ea9c42f0f78f0e5364b1d47847bed76023dc54ce10a35d03a3fc5da6e945062462c0cc0d84c17ff2b8746d0bbb8354b0f9d91e0ab7fe67090f3723c3c2fdc5d1167021bd813192d433c6c66e7e1c21b86f891b21f68cdc7b477e096ae9a306dd35a5e997f9f3047b27b4c6c8bd13f04e142fcdce68d230c31e2fff593afc39b3e6abc0a028e4eb7091f9dabe23222bb9a9c51f3917e53a5181946f3842b2e43afc6457ca93eb81c7496cb59fb7aaf87ec508dd040c76939c6bd18f7512572eefc60af90e618469441a91e2446d6fbd6e0781555d5cc973614bd7df6f6a959d3dd5a1dd8ef9532b758f1e0aca8b6a122977f5b6d61a42405f919a6b009c4ba1a52b33aa229d243fbd68c924b47f424c0c4c6845d6d2e76f3ba0c65308b214a6d856782ac3f64a74148526855518d433b38029996b54ba1168e919f023abfcc2074aff18ca25f7e217b02059c53b8cfb924c98a9e7d822e16e30b9f3ed4e734b062beac3778115421db46211f85380df43a382adc1a9060b0af87e86d592af460a3bbdd4fb8f6c35c056e4464bd281b5433c5b1f8ac4b41768ad63c98856896d78f49d922e3260f0d1f3217e6d65872625eabdc182c776a9a3f960c25b1ea7927be9297483499cfd521aa2bde269e483d75c8f357fcd5859526e6d1f170e7f95756ed1a99a18797c2ad188649d8e23337a39ef75dbe918f9cbd2158ea46b54f652a3a2c91bb974795df22b05d83858e39f4acdcb0b350eedaaacfe1d3ce51ecbd62b11c7a52dd5365531ee5d3b0f11a1ce853824fcb2b48d9062b4bfd4d90d783c8a1428704b9088427147bedf3b29287ed40167cd627b184defd61f6643cf63d62e8f899176d676462015324bac25d36ed270b8e41aee18e60a1208fb3d69b542047f90229328f8c38f557a4258e7504fd359c88ce9f66535078ab809499862dbc36e08a0cc57884b3f73c247947831dcf20fcf98bb0edc485ffc9c68006c645bdbc445cb75cbf1c168c0398f7f1ee5b69ba6f7ed557a500b721a0be8dea3a87a732d3f6e64b8c8fb5c491b32493a393f3a8e1ac17f52db0dbf30c0b750725e2fde81aa09c77ae0433897a5464f53d3cb5b80a6c5825d00d52f7190283f5748a99a33cc3c8fae43084c8f328a9c928cc357706f246e9146822d115dc7c09c4f777052b72e4fde3a0cbe6d8f3b4efb36f03240fa42b28be029dcdc585b2adcce53a27e2404f192388107049a9eb89fcba04e74565c88e602271c832de45042fe29d70d34bf2e9f029e1c9f7721df711d456baddae4eca481d1dd8f89163f2afeab3efc13ee84cc0e2565514fe386353aaf646d55d0c3adc5b905335110badf7e5db7c58750adfd2c90ba71f4efe8efb007ee7995fec180d6ea3fffa5cc2eb519217460a287598b4aa6ffb855de7a93f6e4c592a804127c11765f15d161bba6a32dccdcbc4d227034de3f3dae363e76a848ed90146170712ee9b3fae2c3ede1cfbce4d003e0528faf2b77dd540a1cc32e9538dfb39984e8f0b1655ba630fa2207fba5010a879deacc281a91bedbeb04068966e63ea03749aa0c224d11ea90354dda92fb5ca3b72bd9d244e2b480b40e7c192", 0x1000}, {&(0x7f0000009a40)="903ef3cd57f24317fbd7475f6c206298431bf4b440579be2cf6020173520c09f773bc3f6552cc64502f57ada769842e167564f6f3299c5eb43f6799d2ac96c976699d19edfb84c793b2fa1b693efdfeccb749f3f5de377efd469e4e50de70a9923eb6e336a2b36d3249ae21c4777eac2917ca44564fba420eb37f04fc7b3cfd8c7dbec04221b7c1af76dd7fba42ce33746b9ac750ea2", 0x96}, {&(0x7f0000009b00)="9ed73953d9c65675bfeb894dacb95be92a2d2741d336b9a3d624297a9ed7a61e2c3a86b63eccd596ab29b213573c632bdb53da1b2683e28425dd44d0a808def6b33514279bfc289ea78f88b58db490f4e4923d51b10e0062b279cd2a3d", 0x5d}, {&(0x7f0000009b80)="e63f0a95b49c0eef0c7f0f953e50af3d7fca81", 0x13}, {&(0x7f0000009bc0)="a090756e77964b1aede123a47dd67312a88158841786553318eb9458971d6192a49d5adc8edd2d1f7a34b6647dfe853c6d092658ec3df71e779810dbb4c40c09bbb08a21e20f2962370338eaa59dd954a87b2c9611078fc2bdf4034b8256e132fc8314154ffc619e54ca366f38d72525388dd99ac21d5c8c07129b21a33e88f1b72587bd425a371ab57d4a18cd41798af07223153cc843b421855584b3b5ab4ed0364788f6306cfbb8e9e42aab0edb3222d1b044c72874fb9a9270bf51ccc066416e4a5599ad99b5230c6b4a9f3346a7c409463c43352dbe239961", 0xdb}], 0x5, &(0x7f0000009d40)=[@rights={{0x14, 0x1, 0x1, [r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r5]}}], 0x44, 0xc000}}], 0x7, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x400454d0, 0x2) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0xffff, 0x0, 0x3, 0x13, 0x4}) r12 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r12, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r12, 0xc0845657, 0x0) (async) r13 = fcntl$dupfd(r10, 0x406, r10) write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 17m57.368787923s ago: executing program 1 (id=3024): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0xa, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x20040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0xffffffff, 0xffff133a, 0x2], [{0x0, 0xfffbffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0xfffffffd, 0x1}, {0x0, 0xffffffff}], 0x10, 0x0, 0x0, 0x8000000}) socket$inet_udp(0x2, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17m57.319073529s ago: executing program 1 (id=3025): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x2400000001, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 17m55.852662716s ago: executing program 1 (id=3028): socket$kcm(0xa, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x83}, 0x8015) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r4, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r4, &(0x7f0000000000)='\"', 0x1) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10000, 0x0, 0x54000, 0x2000, &(0x7f0000001000/0x2000)=nil}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') r8 = open_tree(r7, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x1000a2, 0x75, 0x40000, {r8}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x1, 0xe, 0x5, 0x0, 0x5, 0x0, 0x6, 0xb, 0xff, 0x4, 0x5, 0x9, 0x0, 0x1, 0x5, 0x28, 0x2, 0x4, 0xff, '\x00', 0x1, 0xec}) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000002c0)=0x4) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x26000, 0x3, 0xeb, 0x2, 0x4, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x1, 0x4, 0xfc}, {0xd000, 0x0, 0x0, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x9, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x10000, 0x0, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x1dddcc000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000801, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@RTM_NEWMDB={0xd8, 0x54, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@in6_addr=@empty, 0x18b67}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x1, {@in6_addr=@private0, 0x86dd}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) 17m54.257472912s ago: executing program 1 (id=3034): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSET={0x11a0, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x1160, 0x12, 0x0, 0x1, [{0x1064, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1054, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1004, 0x3, "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"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x20, 0x3, "6b911edd0fbe459ed89fd05bac50ea803dacabaf0e74a1b68921df9c"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9e}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcb}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xdf}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x122c}, 0x1, 0x0, 0x0, 0x40081}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='sys/class/usb_role\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/1000, 0x3e8) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x300) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x58) 17m53.554844352s ago: executing program 1 (id=3036): bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x99) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x97c, 0x100, 0x4, 0x34424752, [0x80101, 0x9], [0x200, 0x101], 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x1, "ee4f6d8e0000000600", 0x36314d4e}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000210a82, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002ddffffff00"/68], 0x44) syz_usb_disconnect(r0) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000940)=""/169, &(0x7f0000000a00)=0xa9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) 17m37.398265123s ago: executing program 33 (id=3036): bpf$MAP_CREATE(0x0, &(0x7f0000002680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x99) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x97c, 0x100, 0x4, 0x34424752, [0x80101, 0x9], [0x200, 0x101], 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x1, 0x1, 0x1, "ee4f6d8e0000000600", 0x36314d4e}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x4000000210a82, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20) ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002ddffffff00"/68], 0x44) syz_usb_disconnect(r0) mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x20, 0xe, 0xa9, {0xa9, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc24f494481d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000940)=""/169, &(0x7f0000000a00)=0xa9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0) 10m15.573226605s ago: executing program 5 (id=4699): r0 = socket$kcm(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043209aaaaaaaaaa10100603dc4d782181cd5e5a6119f9a60d5b661a08b7379229f2cc323f3fa2a727e0b01a951997d4d0f0e6c7e1b8209f30a75dfc91201b26007373039d1622bf1a156012f42eb81b22a0b3f70fbb63aa387b91eda11a795a504b4409641ed21627d5349b8f3d99cae1433abf374c1a39672ab5e6b8a7f9e25e5956f5278535599fe6968922b67bfbf75dd9920f9250ddf57420957924847f45f470ad6c7d924c4a3e33"], 0xc) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r1, 0xffc, 0x1000}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'blake2s-128-arm\x00'}}, &(0x7f00000003c0)="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", &(0x7f00000013c0)=""/4096) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(cbc(blowfish))\x00'}, 0x58) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x19) sendmmsg$sock(r5, &(0x7f0000000080), 0x0, 0x45) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x6) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000011) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000340)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x12, 0x0, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0x4, 0x100000000001], 0x1000, 0x4fb40}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0}, 0x18) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf25027c00000c0001800800020001"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x44000) 10m14.174280289s ago: executing program 5 (id=4703): socket$inet6(0xa, 0x1, 0x8010000000000084) io_uring_setup(0x40c2, &(0x7f0000000340)={0x0, 0x64b13e, 0x40, 0x4, 0x18e}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="183000002370000000000000030000009500000000000000bc5531f55a53a97d456548c7e335a1e098494e2eb15152c39e6f9ae4e0dd334dc9daf90270c67f917a7ff2dd633936a1bcaf09df21e019d374a52f780c766092b8afc81d9168291135b7a69caf56c039a19737c117c3bfb3ee42fdfc48f3acc06ca0ba76c4b38f0839277171dcf6559aaff34aa7877b87a9005285bf5ba04c26cf2f720d9fe529eb6a638529da55ff016123d3e27dcfbf39386e46b96379e8e8ef6b61a24f4472f05fe06beacbab981a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100dc080000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92a900000000000000f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb600000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0xb}, {}, {0x7, 0xefb52241b8ee6e67}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x2) 10m11.507288203s ago: executing program 5 (id=4712): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x444}) r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xfffffffffffffffe) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) keyctl$unlink(0x9, r0, 0xffffffffffffffff) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='pagemap\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000500), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x4, r4, 0x0, 0x0}) 10m10.437386217s ago: executing program 5 (id=4718): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_GET_SECUREBITS(0x1b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x121, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setrlimit(0x1, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792ce3616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x1) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 10m9.875952577s ago: executing program 5 (id=4720): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x40) 10m9.377267105s ago: executing program 5 (id=4725): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b66736861743d2f6465762f7474796e752c6c002c636f6e746578743d757365725f752c6673636f6e746578743d"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 10m8.461533047s ago: executing program 34 (id=4725): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, 0x0, 0x0, 0x86022, &(0x7f0000000580)=ANY=[@ANYBLOB="61756469742c67e1506910fc83995f747970653d696d9e2343237846886d617369672c736d61636b66736861743d2f6465762f7474796e752c6c002c636f6e746578743d757365725f752c6673636f6e746578743d"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) openat$null(0xffffff9c, 0x0, 0x101201, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, 0x0}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x4c, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) 3m11.518902306s ago: executing program 6 (id=6126): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r9}}) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0x2e, 0xa9, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001780)=@new_dev={0x1, 0xe31, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000001840)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 3m7.790366241s ago: executing program 6 (id=6133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140012001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 3m7.707451692s ago: executing program 6 (id=6134): timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, 0x0, 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000)=ANY=[@ANYBLOB='mode=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB="0080"]) openat$tun(0xffffff9c, &(0x7f00000002c0), 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockname(r2, &(0x7f00000000c0)=@ax25={{}, [@rose, @remote, @null, @default, @netrom, @netrom, @default]}, &(0x7f0000000140)=0x95) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x100) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) readahead(r4, 0xffffff00, 0xfffffff9) 3m7.441916458s ago: executing program 6 (id=6137): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='oo', 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x300) io_setup(0x80, &(0x7f0000000040)=0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x9, r4, &(0x7f0000001880)="f286291b", 0x4, 0xffffffff}]) r5 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 3m7.216071921s ago: executing program 6 (id=6138): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000070037000f0003000133256425ee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 3m6.811196132s ago: executing program 6 (id=6139): socket$inet6(0xa, 0x1, 0x8010000000000084) io_uring_setup(0x40c2, &(0x7f0000000340)={0x0, 0x64b13e, 0x40, 0x4, 0x18e}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="183000002370000000000000030000009500000000000000bc5531f55a53a97d456548c7e335a1e098494e2eb15152c39e6f9ae4e0dd334dc9daf90270c67f917a7ff2dd633936a1bcaf09df21e019d374a52f780c766092b8afc81d9168291135b7a69caf56c039a19737c117c3bfb3ee42fdfc48f3acc06ca0ba76c4b38f0839277171dcf6559aaff34aa7877b87a9005285bf5ba04c26cf2f720d9fe529eb6a638529da55ff016123d3e27dcfbf39386e46b96379e8e8ef6b61a24f4472f05fe06beacbab981a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100dc080000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92a900000000000000f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb600000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0xb}, {}, {0x7, 0xefb52241b8ee6e67}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040)=0x2) 3m6.398551821s ago: executing program 35 (id=6139): socket$inet6(0xa, 0x1, 0x8010000000000084) io_uring_setup(0x40c2, &(0x7f0000000340)={0x0, 0x64b13e, 0x40, 0x4, 0x18e}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="183000002370000000000000030000009500000000000000bc5531f55a53a97d456548c7e335a1e098494e2eb15152c39e6f9ae4e0dd334dc9daf90270c67f917a7ff2dd633936a1bcaf09df21e019d374a52f780c766092b8afc81d9168291135b7a69caf56c039a19737c117c3bfb3ee42fdfc48f3acc06ca0ba76c4b38f0839277171dcf6559aaff34aa7877b87a9005285bf5ba04c26cf2f720d9fe529eb6a638529da55ff016123d3e27dcfbf39386e46b96379e8e8ef6b61a24f4472f05fe06beacbab981a"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010000100dc080000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92a900000000000000f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb600000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000480)={0x0, 0x6e, 0x8, &(0x7f0000000000)={0x2, "6f5fe95f410000000000b59c000073ef440427000000bda900"}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xffff, 0xb}, {}, {0x7, 0xefb52241b8ee6e67}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000040)=0x2) 5.811624106s ago: executing program 0 (id=7121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xf0ffff, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5.731592101s ago: executing program 0 (id=7122): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@tclass={{0x10, 0x29, 0x43, 0x4}}], 0x10, 0x1000000}}], 0x1, 0x4000004) 5.66662342s ago: executing program 0 (id=7124): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000f80)=[{}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x6c, 0x23, 0x200, 0x70bd2b, 0x5dfdbff, 0x0, [@XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd24, 0x70bd26, 0x70bd2d, 0x9}}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x3f, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x25dfdbff, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x6a, 0x1, {0x6, 0x9}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3432343600000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4246}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004000) 5.55025198s ago: executing program 0 (id=7126): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r1, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) (async) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x3994001, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) (async, rerun: 64) read$msr(r4, &(0x7f0000000340)=""/114, 0x72) (async, rerun: 64) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r8, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (rerun: 32) sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, r10, 0x5, '\x00', r9, r10, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0x43}, @tail_call, @map_val={0x18, 0x0, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7a800000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x10, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r10, r4, r4, r4, r4, r10, r4, r10], 0x0, 0x10, 0x7ff}, 0x94) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 5.549808749s ago: executing program 0 (id=7127): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x664a03, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x2, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffc0}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4044084) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @loopback, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@delqdisc={0x23c, 0x25, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xfff2}, {0xf, 0x2}, {0xd, 0xfffe}}, [@TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0xa, 0x8, 0x2, 0x8, 0x3, 0xa}}, {0x18, 0x2, [0x9, 0x2, 0x4, 0x0, 0xad2, 0x8, 0x81, 0x8, 0x26d, 0x637]}}, {{0x1c, 0x1, {0x3d, 0x1, 0x5ec6, 0x1, 0x1, 0x3, 0x6, 0x2}}, {0x8, 0x2, [0xfff, 0x3c91]}}, {{0x1c, 0x1, {0x7, 0x7, 0xfbff, 0x200, 0x1, 0x8, 0x92e, 0x5}}, {0xe, 0x2, [0xfffb, 0x3, 0x6, 0x4, 0x6]}}, {{0x1c, 0x1, {0x46, 0x2, 0x2, 0x8, 0x2, 0x1, 0x800, 0xa}}, {0x18, 0x2, [0x8, 0x4, 0x5, 0x2, 0x1000, 0x5, 0x688, 0x5, 0xff8c, 0x4]}}, {{0x1c, 0x1, {0x5, 0x2, 0x1, 0x2, 0x1, 0x1, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5, 0x2, 0x2, 0x7683, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0x2, 0x47, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x3, 0x0, 0x5, 0x1, 0x10001, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x7, 0xd]}}, {{0x1c, 0x1, {0x9, 0xc8, 0xe, 0x7, 0x1, 0x9, 0x80010000, 0x7}}, {0x12, 0x2, [0x9, 0xfffc, 0x5, 0x7, 0x0, 0xff, 0x3]}}, {{0x1c, 0x1, {0x3, 0x6, 0x0, 0x9, 0x1, 0xbb58, 0xfffffff7}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x6, 0x0, 0x80, 0x2, 0xfffffff9, 0xfff, 0x1}}, {0x6, 0x2, [0xa]}}, {{0x1c, 0x1, {0x9, 0xc, 0x2, 0x6, 0x0, 0x23, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x2, 0x6, 0x9, 0xa, 0x1, 0x9, 0x40}}, {0x4}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x2, 0x0, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x400]}}]}]}, 0x23c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040), 0x800) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0) 5.16690884s ago: executing program 0 (id=7128): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x10000, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0x80000001, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) 5.045231968s ago: executing program 36 (id=7128): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x10000, 0x0, 0x0, 0x8, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f044158d9744b66cc530000000400000001000000002200", [0x314d39d0, 0x245]}}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0x4c09, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={0x20, 0x1e, 0x221, 0x0, 0x0, {0x7}, [@nested={0xc, 0x19, 0x0, 0x1, [@nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x28}]}]}]}, 0x20}}, 0x0) write$eventfd(r2, &(0x7f00000000c0)=0x80000001, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) 3.474225583s ago: executing program 3 (id=7133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01003a0000000400000003740006140006006970366772653000000000000000000008000700000000000800040064011901080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) 3.350730035s ago: executing program 3 (id=7135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 3.221257682s ago: executing program 3 (id=7138): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xff84, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff00}, 0x48) 2.720013501s ago: executing program 3 (id=7141): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x55af) r7 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r10}}) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0x2e, 0xa9, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001780)=@new_dev={0x1, 0xe31, 0x0, 0x0, 0x1000, 0xffffffff, r2, 0x0, 0x10}}}, &(0x7f0000001840)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) 2.581149207s ago: executing program 7 (id=7142): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x44}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x800) r2 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "7c15da7a000956c8c0b4550d8540cc1fed5e3219101f255f38ceffefc9f0e844", "451ee86e67bf7f073d195f76ca60c27fc6be8a334e9f24f675ff01571b8ad532", "17c800428089ef453e44307329979d415d68830c00", "ac2092f10c174dd025f076da7c5b5b1b0538bbdc3356886d036abf4b08029145", "6e1113b90e1a71ab4612d0df65ebc7e700000200", "6d420ca75b3bc8fcb8e10d15", 0xc5, 0x4, 0xf38, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x100, 0x0, 0x1, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x7, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) sched_setscheduler(0x0, 0x2, &(0x7f00000191c0)=0x5) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x11) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000019080)={'batadv_slave_1\x00'}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$key(0xf, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x176, 0x0, 0x10001}]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r11, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x91, 0x8}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r12 = getpid() sched_setscheduler(r12, 0x2, 0x0) sched_setaffinity(r12, 0x8, &(0x7f0000000240)=0x2) fstat(r6, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000019140)={{0x1, 0x1, 0x18, r4, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000019180)={r12, r13, r14}, 0xc) 2.089293917s ago: executing program 7 (id=7144): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r4, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002380)={@local, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x6, 0xd6b, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xd13, 0x0, [], "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"}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x10, 0x1, 0x0, 0x3, 0x2, 0x6}, 0x1, {0xffff}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x4, 0x1, 0x1, 0x0, 0x5, 0x9}, 0x2, {0x1000, 0x1, 0x2, 0x10, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0xfffffffffffffff9) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x30004083}, 0x80) 2.050186645s ago: executing program 4 (id=7145): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1000000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 1.983505797s ago: executing program 7 (id=7146): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0xe, {0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x24) socket$kcm(0x21, 0x3, 0xa) gettid() socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_HYPERV_EVENTFD(r3, 0xc048aec8, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0xfffffffe}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x9, 0x0, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000340)={0xb6, 0x0, 0x4c9}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000240)={0x0, 0xea60}, 0x8) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x2000000000, r7}) mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0xffffff7f) 1.983097481s ago: executing program 4 (id=7147): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0x6, 0x8, 0x10, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7, 0x80, 0x7f}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x4000001) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x1c) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) socket(0x10, 0x80003, 0x0) close(0x3) openat$nvram(0xffffff9c, &(0x7f0000000100), 0x40, 0x0) syz_ublk_setup_io_uring(0x1ee0, &(0x7f0000000040)={0x0, 0x7917, 0x1, 0x1, 0x3a1, 0x0, r2}, 0x0, 0x0, 0x0) 1.457946087s ago: executing program 4 (id=7148): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fb0(0xffffff9c, 0x0, 0x80001, 0x0) pwrite64(r0, 0x0, 0x0, 0x6f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0xc, 0xfff, 0x4b, 0x8007}, 'syz0\x00', 0x41}) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0xc83c0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x8, 0x9, 0x5, 0x8001}, {0x1, 0x7, 0xba, 0x5}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.224404126s ago: executing program 4 (id=7149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030000000000140002007663616e300000000000000000010000080001000100000014000600ff"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 1.148455809s ago: executing program 4 (id=7150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xcd}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="38fffe00", @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.130596186s ago: executing program 3 (id=7151): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f0003000133256425ee7b1d58b9a64411f6bbf44d", 0x1f}], 0x1) 1.021470844s ago: executing program 7 (id=7152): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b0300000000000024001265c8ff7f401400028005000a0001000000060005004e230008"], 0x44}}, 0x48000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) 1.021020977s ago: executing program 3 (id=7153): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x408, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = timerfd_create(0x0, 0x80000) unshare(0x24020400) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffd, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff70, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0x4, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xfff3}, {0x0, 0x8}, {0xe, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x0, 0x1, 0x7}, @TCA_FLOW_XOR={0x0, 0x7, 0x2}, @TCA_FLOW_POLICE={0x0, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x5}, @TCA_POLICE_RATE={0x0, 0x2, [0x5, 0x4a, 0x400, 0x2, 0x8, 0x9, 0x8, 0x2, 0x4, 0x1, 0xffffffff, 0x611, 0x3, 0x100, 0x4, 0xffff, 0x1, 0x559, 0x8, 0x6fc, 0x2, 0x0, 0x7, 0x8, 0x6, 0x1, 0x8000, 0x8000, 0x6, 0x0, 0x1, 0x7ff, 0x1, 0x3, 0x9, 0x9, 0x4, 0xe, 0x100, 0x87ae, 0x2, 0xfff, 0x0, 0xffff, 0x5, 0x0, 0x7, 0x7f, 0x9, 0xfffffff7, 0x5, 0x509, 0x2, 0x2, 0x78, 0xcab1, 0xeeae, 0x7, 0x40, 0x80000001, 0x2, 0x6, 0x8000, 0x8, 0x1, 0x7, 0xe, 0x4, 0x1, 0x2, 0x1, 0x0, 0x2a2, 0xc00000, 0x5, 0x0, 0x8, 0x10001, 0xffff, 0xfffffffc, 0x80000000, 0x7b2, 0x2, 0xc, 0x8000, 0x27e4, 0xffffff3a, 0x2, 0x5, 0x7, 0x5, 0xfffffffc, 0x6, 0x4, 0x2, 0x80, 0x401, 0x1, 0x200, 0x7, 0x7fffffff, 0x800, 0x7, 0x6, 0xac4, 0x4, 0x0, 0x3ff, 0xc, 0x2, 0x4, 0x6, 0x8000, 0x1, 0xfffffc01, 0x9, 0xffffffff, 0x5, 0xfb15, 0x6, 0x2, 0xf8, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0xa3, 0x80000000, 0x9, 0xb967, 0x401, 0x5, 0x8000, 0x3, 0x7, 0x1, 0xfffffff7, 0x1, 0x5, 0x7fffffff, 0xf723, 0x1, 0xfff, 0xb, 0x9, 0x200, 0xfffffffa, 0x4ea, 0x1, 0xffffffff, 0x2536, 0x200, 0x3, 0xb0cd, 0x3, 0xc0d, 0x66c7, 0x6, 0x2, 0x3, 0x3, 0x10, 0x1, 0x0, 0x2, 0x8, 0xfffffffd, 0x3, 0xfffffff9, 0x8, 0x7e, 0x1f2a35cb, 0x0, 0x8, 0x6, 0x9, 0x7, 0x8001, 0x6, 0x7, 0xfffffbff, 0x1, 0xe9b, 0x4, 0x90, 0xffffffff, 0x2, 0x8, 0x2c, 0x1, 0x8, 0x697, 0x8, 0x1ff, 0x6, 0x8, 0x7, 0x8, 0x1, 0x9, 0x0, 0x8, 0x5, 0x9, 0x2, 0xb0, 0x4, 0x9, 0xc49e, 0x349, 0x200, 0x4, 0x3, 0x8, 0xfff, 0x3, 0x8, 0x1, 0xfffffff9, 0x2, 0x8000, 0xe, 0x7, 0xfff, 0x7, 0x2, 0x200, 0x80000000, 0x0, 0x100, 0x9, 0xfffffffa, 0x7f, 0x4, 0x2, 0x7, 0x3, 0x9, 0x0, 0x4, 0x978, 0x39f, 0x9, 0x8001, 0xba9c, 0x5, 0x400, 0x8, 0x9, 0x6, 0x2, 0x8000, 0xfffffffb, 0x10000, 0x2]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xfffffffffffffff9}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b8c2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24045091}, 0x40) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x24, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x40}, 0x28) timerfd_gettime(r2, 0x0) 956.434748ms ago: executing program 4 (id=7154): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x1, 0x6) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) io_setup(0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="cf", 0x1) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000), 0xfffb) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00 \x00', @ANYRES16=r8, @ANYBLOB="0100000000000400000003740006080007007f00000114000200"/42], 0x30}, 0x1, 0xffffffff00000003}, 0x800) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r9 = eventfd2(0xc, 0x800) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1, r9}]) r10 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000380)='port\x00', &(0x7f00000003c0)='12345\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) 956.101339ms ago: executing program 7 (id=7155): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x408, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = timerfd_create(0x0, 0x80000) unshare(0x24020400) setns(0xc9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0xfffffffd, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000040)=0x200) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) write$dsp(r10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff70, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0x4, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xe, 0xfff3}, {0x0, 0x8}, {0xe, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x0, 0x1, 0x7}, @TCA_FLOW_XOR={0x0, 0x7, 0x2}, @TCA_FLOW_POLICE={0x0, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x0, 0x4, 0x5}, @TCA_POLICE_RATE={0x0, 0x2, [0x5, 0x4a, 0x400, 0x2, 0x8, 0x9, 0x8, 0x2, 0x4, 0x1, 0xffffffff, 0x611, 0x3, 0x100, 0x4, 0xffff, 0x1, 0x559, 0x8, 0x6fc, 0x2, 0x0, 0x7, 0x8, 0x6, 0x1, 0x8000, 0x8000, 0x6, 0x0, 0x1, 0x7ff, 0x1, 0x3, 0x9, 0x9, 0x4, 0xe, 0x100, 0x87ae, 0x2, 0xfff, 0x0, 0xffff, 0x5, 0x0, 0x7, 0x7f, 0x9, 0xfffffff7, 0x5, 0x509, 0x2, 0x2, 0x78, 0xcab1, 0xeeae, 0x7, 0x40, 0x80000001, 0x2, 0x6, 0x8000, 0x8, 0x1, 0x7, 0xe, 0x4, 0x1, 0x2, 0x1, 0x0, 0x2a2, 0xc00000, 0x5, 0x0, 0x8, 0x10001, 0xffff, 0xfffffffc, 0x80000000, 0x7b2, 0x2, 0xc, 0x8000, 0x27e4, 0xffffff3a, 0x2, 0x5, 0x7, 0x5, 0xfffffffc, 0x6, 0x4, 0x2, 0x80, 0x401, 0x1, 0x200, 0x7, 0x7fffffff, 0x800, 0x7, 0x6, 0xac4, 0x4, 0x0, 0x3ff, 0xc, 0x2, 0x4, 0x6, 0x8000, 0x1, 0xfffffc01, 0x9, 0xffffffff, 0x5, 0xfb15, 0x6, 0x2, 0xf8, 0x5, 0x5, 0x7, 0x80000000, 0x1, 0xa3, 0x80000000, 0x9, 0xb967, 0x401, 0x5, 0x8000, 0x3, 0x7, 0x1, 0xfffffff7, 0x1, 0x5, 0x7fffffff, 0xf723, 0x1, 0xfff, 0xb, 0x9, 0x200, 0xfffffffa, 0x4ea, 0x1, 0xffffffff, 0x2536, 0x200, 0x3, 0xb0cd, 0x3, 0xc0d, 0x66c7, 0x6, 0x2, 0x3, 0x3, 0x10, 0x1, 0x0, 0x2, 0x8, 0xfffffffd, 0x3, 0xfffffff9, 0x8, 0x7e, 0x1f2a35cb, 0x0, 0x8, 0x6, 0x9, 0x7, 0x8001, 0x6, 0x7, 0xfffffbff, 0x1, 0xe9b, 0x4, 0x90, 0xffffffff, 0x2, 0x8, 0x2c, 0x1, 0x8, 0x697, 0x8, 0x1ff, 0x6, 0x8, 0x7, 0x8, 0x1, 0x9, 0x0, 0x8, 0x5, 0x9, 0x2, 0xb0, 0x4, 0x9, 0xc49e, 0x349, 0x200, 0x4, 0x3, 0x8, 0xfff, 0x3, 0x8, 0x1, 0xfffffff9, 0x2, 0x8000, 0xe, 0x7, 0xfff, 0x7, 0x2, 0x200, 0x80000000, 0x0, 0x100, 0x9, 0xfffffffa, 0x7f, 0x4, 0x2, 0x7, 0x3, 0x9, 0x0, 0x4, 0x978, 0x39f, 0x9, 0x8001, 0xba9c, 0x5, 0x400, 0x8, 0x9, 0x6, 0x2, 0x8000, 0xfffffffb, 0x10000, 0x2]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0xfffffffffffffff9}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b8c2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24045091}, 0x40) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_FAMILY={0x5, 0xd, 0x2c}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x24, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @func_proto, @func={0x1, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x40}, 0x28) timerfd_gettime(r2, 0x0) 0s ago: executing program 7 (id=7156): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000800), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000a40)={'sit0\x00', &(0x7f00000009c0)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x45142d0c, 0x1, {{0xb, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x10, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @rr={0x7, 0x7, 0x4f, [@private=0xa010102]}, @ssrr={0x89, 0xb, 0x69, [@empty, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000000040)={'ip6gretap0\x00', 0x80003}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="0c0002"], 0x24}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x11, 0x1, {0x6, 0x7, 0x0, 0x9, 0x0, 0x8, 0xff}}, {0x4d}}, {{0x1c, 0x1, {0x3, 0x0, 0x80, 0x0, 0x2, 0x0, 0x200, 0x2}}, {0x8, 0x2, [0x2, 0xfffc]}}]}]}, 0x78}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b40)={0x0, @private, @multicast1}, &(0x7f0000000b80)=0xc) r16 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r18 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r17, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r18, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r17, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c8070000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="5c01028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f8ffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3cdf000024000700656e61626c7d6400000002000000000000000000000000000000000000000000050003000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400010001003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="3c01028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000500097fa70000008300029bf288000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400008000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004001429000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="6c01028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="ac00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r14, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000080000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d6090000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000086ff040003000000"], 0x7c8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48d1}, 0x40) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x4000804) kernel console output (not intermixed with test programs): [T20169] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1663.111838][T20169] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.295594][ T951] netlink: 'syz.3.6679': attribute type 1 has an invalid length. [ 1663.345012][T20169] usb 9-1: usb_control_msg returned -32 [ 1663.346747][ T951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1663.354671][T20169] usbtmc 9-1:16.0: can't read capabilities [ 1663.521964][ T951] bond3: (slave veth1): Enslaving as an active interface with a down link [ 1663.539392][ T953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1663.546812][ T953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.552710][T18232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.560063][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.566263][T18232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.573200][T18204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.578215][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.580669][ T953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.582279][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.585562][ T953] batadv_slave_1: left promiscuous mode [ 1663.592990][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.598354][ T953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.611322][ T953] veth1_vlan: left promiscuous mode [ 1663.614727][T15219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.618714][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.625594][ T953] veth0_vlan: left promiscuous mode [ 1663.629261][ T953] veth0_vlan: entered promiscuous mode [ 1663.634485][ T953] veth1_vlan: entered promiscuous mode [ 1663.643451][ T953] veth1_macvtap: left promiscuous mode [ 1663.651056][ T953] veth0_macvtap: left promiscuous mode [ 1663.656247][ T953] veth0_macvtap: entered promiscuous mode [ 1663.661316][ T953] veth1_macvtap: entered promiscuous mode [ 1663.667008][ T956] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6680'. [ 1663.709214][ T953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1663.716108][ T953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1663.720471][ T953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1663.725246][ T953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1663.730910][ T953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1663.744102][ T959] usbtmc 9-1:16.0: stb usb_control_msg returned -32 [ 1663.751096][T20169] usb 9-1: USB disconnect, device number 116 [ 1663.785383][ T953] veth0_to_team: entered promiscuous mode [ 1663.793673][ T953] batman_adv: batadv0: Interface activated: vlan2 [ 1663.808671][ T954] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1663.812367][ T954] bond3: (slave batadv1): making interface the new active one [ 1663.816197][ T954] batadv1: entered promiscuous mode [ 1663.818812][ T954] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1663.864801][T30582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.872109][T30582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.887532][T30582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.893854][T30582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1663.923425][T30582] bond3: (slave veth1): link status definitely up, 10000 Mbps full duplex [ 1664.117491][ T967] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1664.417154][ T967] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1664.423079][ T967] overlayfs: failed to look up (tracing) for ino (-66) [ 1664.756940][ T50] usb 46-1: device descriptor read/8, error -110 [ 1665.019242][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1665.821696][ T50] usb usb46-port1: attempt power cycle [ 1665.833285][ T42] audit: type=1800 audit(2000000821.488:28222): pid=970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6682" name="file0" dev="9p" ino=79954023 res=0 errno=0 [ 1665.925290][ T991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.934267][ T991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1666.024736][ T1001] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6690'. [ 1666.357073][T15219] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 1666.546412][T15219] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 1666.558632][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.567866][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.574049][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.581817][ T50] usb usb46-port1: unable to enumerate USB device [ 1666.582216][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.588234][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.591692][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.687790][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.691371][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.694749][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.698920][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.702187][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.705659][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.709225][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.714056][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.717575][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.721388][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.724583][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.728037][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.731651][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.737417][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.740842][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.810852][T15219] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1666.812963][ T1016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1666.863624][ T1016] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1666.867091][ T1016] overlayfs: failed to look up (tracing) for ino (-66) [ 1666.893010][T15219] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1666.896993][T15219] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1666.994508][T15219] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1666.999798][T15219] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1667.002390][T15219] usb 12-1: Product: syz [ 1667.003722][T15219] usb 12-1: Manufacturer: syz [ 1667.005186][T15219] usb 12-1: SerialNumber: syz [ 1667.007936][T15219] usb 12-1: config 0 descriptor?? [ 1667.012607][T15219] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 1667.229943][T15219] usb 12-1: USB disconnect, device number 13 [ 1667.234366][T15219] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 1667.848545][ T1039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1667.851398][ T1039] netlink: 'syz.4.6703': attribute type 5 has an invalid length. [ 1667.967279][ T1047] FAULT_INJECTION: forcing a failure. [ 1667.967279][ T1047] name failslab, interval 1, probability 1, space 0, times 0 [ 1667.973542][ T1047] CPU: 0 UID: 0 PID: 1047 Comm: syz.4.6705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1667.973560][ T1047] Tainted: [L]=SOFTLOCKUP [ 1667.973564][ T1047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1667.973571][ T1047] Call Trace: [ 1667.973576][ T1047] [ 1667.973581][ T1047] dump_stack_lvl+0x100/0x190 [ 1667.973598][ T1047] should_fail_ex.cold+0x5/0xa [ 1667.973611][ T1047] should_failslab+0xc2/0x120 [ 1667.973626][ T1047] __kvmalloc_node_noprof+0x116/0x970 [ 1667.973642][ T1047] ? bpf_test_run_xdp_live+0x13a/0x760 [ 1667.973662][ T1047] bpf_test_run_xdp_live+0x13a/0x760 [ 1667.973681][ T1047] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1667.973699][ T1047] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1667.973713][ T1047] ? find_held_lock+0x2b/0x80 [ 1667.973729][ T1047] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1667.973754][ T1047] ? 0xffffffffa0206480 [ 1667.973764][ T1047] ? 0xffffffffa0206480 [ 1667.973774][ T1047] ? 0xffffffffa0206480 [ 1667.973782][ T1047] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 1667.973799][ T1047] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 1667.973815][ T1047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1667.973831][ T1047] ? fput+0x79/0x100 [ 1667.973843][ T1047] ? __bpf_prog_get+0x97/0x2a0 [ 1667.973858][ T1047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1667.973870][ T1047] __sys_bpf+0x2a12/0x4e80 [ 1667.973886][ T1047] ? __pfx___sys_bpf+0x10/0x10 [ 1667.973903][ T1047] ? find_held_lock+0x2b/0x80 [ 1667.973916][ T1047] ? get_pid_task+0xfc/0x250 [ 1667.973929][ T1047] ? get_pid_task+0xfc/0x250 [ 1667.973946][ T1047] ? proc_fail_nth_write+0x9f/0x220 [ 1667.973962][ T1047] ? find_held_lock+0x2b/0x80 [ 1667.973978][ T1047] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1667.973993][ T1047] ? find_held_lock+0x2b/0x80 [ 1667.974005][ T1047] ? ksys_write+0x190/0x250 [ 1667.974015][ T1047] ? ksys_write+0x190/0x250 [ 1667.974034][ T1047] ? fput+0x79/0x100 [ 1667.974048][ T1047] ? __ia32_sys_bpf+0xcc/0x170 [ 1667.974059][ T1047] __ia32_sys_bpf+0xcc/0x170 [ 1667.974072][ T1047] ? __do_fast_syscall_32+0x98/0x970 [ 1667.974087][ T1047] __do_fast_syscall_32+0xe7/0x970 [ 1667.974100][ T1047] ? lockdep_hardirqs_on+0x78/0x100 [ 1667.974114][ T1047] do_fast_syscall_32+0x32/0x70 [ 1667.974129][ T1047] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1667.974143][ T1047] RIP: 0023:0xf706efec [ 1667.974157][ T1047] Code: Unable to access opcode bytes at 0xf706efc2. [ 1667.974163][ T1047] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1667.974174][ T1047] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 1667.974181][ T1047] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1667.974187][ T1047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1667.974194][ T1047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1667.974200][ T1047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1667.974213][ T1047] [ 1668.234103][ T1056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.239763][ T1056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.869622][ T1074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.874888][ T1074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.970651][T14556] net_ratelimit: 12 callbacks suppressed [ 1668.970672][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.981836][T15219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.100136][ T1079] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1669.133439][ T1079] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1669.138471][ T1079] overlayfs: failed to look up (tracing) for ino (-66) [ 1669.231840][T18195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.237854][T29582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.240903][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.245619][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.489774][ T1081] netlink: 'syz.7.6716': attribute type 33 has an invalid length. [ 1669.492134][ T1081] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6716'. [ 1670.075895][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.080959][T32654] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1670.118950][T15219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1670.585698][ T42] audit: type=1800 audit(2000000825.943:28223): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6725" name="file0" dev="overlay" ino=2843 res=0 errno=0 [ 1670.631401][ T1116] block nbd3: server does not support multiple connections per device. [ 1670.638704][ T1116] block nbd3: shutting down sockets [ 1670.951850][T15219] usb 8-1: new full-speed USB device number 87 using dummy_hcd [ 1671.134117][T25462] usb 9-1: new high-speed USB device number 117 using dummy_hcd [ 1671.138898][T15219] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1671.141454][T15219] usb 8-1: config 0 has no interface number 0 [ 1671.143317][T15219] usb 8-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1671.146932][T15219] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 1671.152404][T15219] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1671.155269][T15219] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1671.157700][T15219] usb 8-1: Product: syz [ 1671.158989][T15219] usb 8-1: SerialNumber: syz [ 1671.162521][T15219] usb 8-1: config 0 descriptor?? [ 1671.166810][T15219] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1671.197781][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.200938][T18195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1671.293878][T25462] usb 9-1: Using ep0 maxpacket: 8 [ 1671.299607][T25462] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.303355][T25462] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.306995][T25462] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1671.309390][T25462] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1671.312531][T25462] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.316808][T25462] usb 9-1: config 0 descriptor?? [ 1671.539348][T25462] usbhid 9-1:0.0: can't add hid device: -71 [ 1671.541493][T25462] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1671.549351][T25462] usb 9-1: USB disconnect, device number 117 [ 1671.622164][T31385] usb 8-1: USB disconnect, device number 87 [ 1671.837822][ T1150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1671.924682][ T1150] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1671.929137][ T1150] overlayfs: failed to look up (tracing) for ino (-66) [ 1672.228561][ T1156] FAULT_INJECTION: forcing a failure. [ 1672.228561][ T1156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1672.238105][ T1156] CPU: 0 UID: 0 PID: 1156 Comm: syz.3.6738 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.238124][ T1156] Tainted: [L]=SOFTLOCKUP [ 1672.238128][ T1156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1672.238135][ T1156] Call Trace: [ 1672.238140][ T1156] [ 1672.238145][ T1156] dump_stack_lvl+0x100/0x190 [ 1672.238163][ T1156] should_fail_ex.cold+0x5/0xa [ 1672.238176][ T1156] _copy_from_iter+0x1f4/0x1690 [ 1672.238196][ T1156] ? __pfx__copy_from_iter+0x10/0x10 [ 1672.238212][ T1156] ? kasan_save_track+0x14/0x30 [ 1672.238226][ T1156] ? __kasan_kmalloc+0xaa/0xb0 [ 1672.238240][ T1156] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1672.238252][ T1156] ? configfs_write_iter+0x388/0x4e0 [ 1672.238267][ T1156] configfs_write_iter+0xb3/0x4e0 [ 1672.238295][ T1156] vfs_write+0x6ac/0x1050 [ 1672.238306][ T1156] ? __pfx_configfs_write_iter+0x10/0x10 [ 1672.238318][ T1156] ? __pfx_vfs_write+0x10/0x10 [ 1672.238328][ T1156] ? find_held_lock+0x2b/0x80 [ 1672.238351][ T1156] ksys_write+0x12a/0x250 [ 1672.238361][ T1156] ? __pfx_ksys_write+0x10/0x10 [ 1672.238376][ T1156] ? ksys_write+0x1ac/0x250 [ 1672.238386][ T1156] ? __pfx_ksys_write+0x10/0x10 [ 1672.238399][ T1156] __do_fast_syscall_32+0xe7/0x970 [ 1672.238413][ T1156] ? lockdep_hardirqs_on+0x78/0x100 [ 1672.238428][ T1156] do_fast_syscall_32+0x32/0x70 [ 1672.238442][ T1156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1672.238456][ T1156] RIP: 0023:0xf6ffefec [ 1672.238472][ T1156] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1672.238478][ T1156] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1672.238489][ T1156] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1672.238496][ T1156] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000000 [ 1672.238514][ T1156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1672.238521][ T1156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.238528][ T1156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1672.238543][ T1156] [ 1672.542206][ T1160] block nbd3: server does not support multiple connections per device. [ 1672.548248][ T1160] block nbd3: shutting down sockets [ 1673.073163][ T1187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1673.111755][ T1187] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1673.115037][ T1187] overlayfs: failed to look up (tracing) for ino (-66) [ 1674.434449][ T1206] net_ratelimit: 8 callbacks suppressed [ 1674.434462][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.442715][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.451708][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.454649][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.494104][ T1210] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6754'. [ 1674.719641][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.723637][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.728905][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.733090][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.737277][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.741137][ T1223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.118156][ T1232] syzkaller0: entered promiscuous mode [ 1675.123507][ T1232] syzkaller0: entered allmulticast mode [ 1675.138392][ T42] audit: type=1804 audit(2000000830.201:28224): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6763" name="bus" dev="ramfs" ino=142014 res=1 errno=0 [ 1675.145485][ T42] audit: type=1804 audit(2000000830.210:28225): pid=1232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6763" name="bus" dev="ramfs" ino=142014 res=1 errno=0 [ 1676.086960][ C2] hpet: Lost 1 RTC interrupts [ 1676.347429][ T1258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1676.352387][ T1258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1676.711999][T30582] batadv1: left promiscuous mode [ 1676.802526][ T1264] FAULT_INJECTION: forcing a failure. [ 1676.802526][ T1264] name failslab, interval 1, probability 1, space 0, times 0 [ 1676.808958][ T1264] CPU: 3 UID: 0 PID: 1264 Comm: syz.7.6773 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.808986][ T1264] Tainted: [L]=SOFTLOCKUP [ 1676.808992][ T1264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1676.809002][ T1264] Call Trace: [ 1676.809010][ T1264] [ 1676.809017][ T1264] dump_stack_lvl+0x100/0x190 [ 1676.809041][ T1264] should_fail_ex.cold+0x5/0xa [ 1676.809061][ T1264] should_failslab+0xc2/0x120 [ 1676.809085][ T1264] __kmalloc_noprof+0xfc/0x820 [ 1676.809106][ T1264] ? rcu_is_watching+0x12/0xc0 [ 1676.809126][ T1264] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1676.809158][ T1264] tomoyo_realpath_from_path+0xb6/0x690 [ 1676.809189][ T1264] tomoyo_path_number_perm+0x23c/0x580 [ 1676.809210][ T1264] ? tomoyo_path_number_perm+0x22e/0x580 [ 1676.809234][ T1264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1676.809256][ T1264] ? get_pid_task+0x106/0x250 [ 1676.809298][ T1264] ? find_held_lock+0x2b/0x80 [ 1676.809319][ T1264] ? __fget_files+0x215/0x3d0 [ 1676.809334][ T1264] ? hook_file_ioctl_common+0x140/0x440 [ 1676.809356][ T1264] ? __fget_files+0x215/0x3d0 [ 1676.809376][ T1264] ? __fget_files+0x21f/0x3d0 [ 1676.809395][ T1264] security_file_ioctl_compat+0xd3/0x230 [ 1676.809419][ T1264] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1676.809447][ T1264] __do_fast_syscall_32+0xe7/0x970 [ 1676.809469][ T1264] ? lockdep_hardirqs_on+0x78/0x100 [ 1676.809491][ T1264] do_fast_syscall_32+0x32/0x70 [ 1676.809513][ T1264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.809534][ T1264] RIP: 0023:0xf704efec [ 1676.809554][ T1264] Code: Unable to access opcode bytes at 0xf704efc2. [ 1676.809561][ T1264] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1676.809578][ T1264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000402c542d [ 1676.809588][ T1264] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.809598][ T1264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1676.809608][ T1264] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1676.809618][ T1264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.809641][ T1264] [ 1676.809648][ T1264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1677.045953][ T1271] x_tables: duplicate underflow at hook 3 [ 1677.098876][ T1271] ./bus: Can't lookup blockdev [ 1677.145673][ T1271] comedi comedi3: s526: I/O base address or length out of range [ 1678.646082][ T50] usb 9-1: new high-speed USB device number 118 using dummy_hcd [ 1678.844259][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 1678.891008][ T50] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.899694][ T50] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1678.906106][ T50] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1678.910303][ T50] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1678.917523][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.940141][ T50] usb 9-1: config 0 descriptor?? [ 1679.257316][ T50] usbhid 9-1:0.0: can't add hid device: -71 [ 1679.259380][ T50] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1679.279357][ T50] usb 9-1: USB disconnect, device number 118 [ 1679.692055][ T1300] bond0: (slave bond_slave_0): Releasing backup interface [ 1679.746911][ T1300] bond0: (slave bond_slave_1): Releasing backup interface [ 1679.778316][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1679.782406][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.794184][ T1300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.797706][ T1300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.886596][ T1300] batman_adv: batadv0: Interface deactivated: vlan2 [ 1679.893238][ T1300] batman_adv: batadv0: Removing interface: vlan2 [ 1679.899314][ T1300] bond0: (slave bond2): Releasing backup interface [ 1679.910354][ T1300] bond3: (slave veth1): Releasing active interface [ 1679.912654][ T1300] bond3: (slave veth1): the permanent HWaddr of slave - 16:99:89:9b:6c:ab - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1679.918289][ T1300] batadv1: entered promiscuous mode [ 1679.923539][ T1300] bond3: (slave batadv1): Releasing active interface [ 1679.927958][ T1300] batadv1: left promiscuous mode [ 1680.030992][ T42] audit: type=1326 audit(2000000834.786:28226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.047882][ T42] audit: type=1326 audit(2000000834.786:28227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.067060][ T42] audit: type=1326 audit(2000000834.786:28228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.077909][ C1] net_ratelimit: 23 callbacks suppressed [ 1680.077926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.095902][ T42] audit: type=1326 audit(2000000834.786:28229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.109815][ T42] audit: type=1326 audit(2000000834.786:28231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.128543][ T42] audit: type=1326 audit(2000000834.786:28230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.141279][ T42] audit: type=1326 audit(2000000834.786:28232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1318 comm="syz.4.6789" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1680.592013][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.628957][ T1337] can0: slcan on ttyS3. [ 1680.819506][T18578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.849028][ C2] hpet_rtc_timer_reinit: 90 callbacks suppressed [ 1680.849042][ C2] hpet: Lost 1 RTC interrupts [ 1681.028962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.104063][T24524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1681.113478][T24524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1681.118159][T24524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1681.123893][T24524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1681.128535][T24524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1681.288670][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.372081][ T1332] can0 (unregistered): slcan off ttyS3. [ 1681.396133][ T1383] tipc: Started in network mode [ 1681.397848][ T1383] tipc: Node identity 2007ff, cluster identity 4711 [ 1681.399987][ T1383] tipc: Node number set to 2099199 [ 1681.403467][ T1383] netlink: 464 bytes leftover after parsing attributes in process `syz.7.6803'. [ 1681.411713][ T1383] netlink: 464 bytes leftover after parsing attributes in process `syz.7.6803'. [ 1681.596194][ T1356] lo speed is unknown, defaulting to 1000 [ 1681.703932][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1681.792570][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.795450][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.798418][ T1356] bridge_slave_0: entered allmulticast mode [ 1681.801964][ T1356] bridge_slave_0: entered promiscuous mode [ 1681.806409][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.809002][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.811687][ T1356] bridge_slave_1: entered allmulticast mode [ 1681.814858][ T1356] bridge_slave_1: entered promiscuous mode [ 1681.838833][ T1356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1681.845999][ T1356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1681.861561][ T1356] team0: Port device team_slave_0 added [ 1681.864819][ T1356] team0: Port device team_slave_1 added [ 1681.878183][ T1356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.880386][ T1356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.889062][ T1356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.896817][ T1356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.903747][ T1356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.932245][ T1356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.970194][T25462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.096196][ T1356] hsr_slave_0: entered promiscuous mode [ 1682.099773][ T1356] hsr_slave_1: entered promiscuous mode [ 1682.102821][ T1356] debugfs: 'hsr0' already exists in 'hsr' [ 1682.106594][ T1356] Cannot create hsr debugfs directory [ 1682.143028][T32654] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1682.356309][ T1356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.461312][ T1356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.476516][ T1436] CIFS: Attempting to mount //127.0.0.1/share [ 1682.478446][ T1436] FAULT_INJECTION: forcing a failure. [ 1682.478446][ T1436] name failslab, interval 1, probability 1, space 0, times 0 [ 1682.483549][ T1436] CPU: 3 UID: 0 PID: 1436 Comm: syz.4.6815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.483567][ T1436] Tainted: [L]=SOFTLOCKUP [ 1682.483571][ T1436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1682.483578][ T1436] Call Trace: [ 1682.483582][ T1436] [ 1682.483587][ T1436] dump_stack_lvl+0x100/0x190 [ 1682.483604][ T1436] should_fail_ex.cold+0x5/0xa [ 1682.483617][ T1436] should_failslab+0xc2/0x120 [ 1682.483633][ T1436] __kmalloc_cache_noprof+0x91/0x6c0 [ 1682.483646][ T1436] ? cifs_smb3_do_mount+0x107/0x1b20 [ 1682.483679][ T1436] cifs_smb3_do_mount+0x107/0x1b20 [ 1682.483700][ T1436] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1682.483719][ T1436] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.483737][ T1436] smb3_get_tree+0x1fd/0x440 [ 1682.483760][ T1436] vfs_get_tree+0x92/0x320 [ 1682.483776][ T1436] vfs_cmd_create+0xd7/0x2a0 [ 1682.483792][ T1436] __do_sys_fsconfig+0x55a/0xcb0 [ 1682.483808][ T1436] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1682.483825][ T1436] ? ksys_write+0x1ac/0x250 [ 1682.483835][ T1436] ? __pfx_ksys_write+0x10/0x10 [ 1682.483848][ T1436] __do_fast_syscall_32+0xe7/0x970 [ 1682.483862][ T1436] ? lockdep_hardirqs_on+0x78/0x100 [ 1682.483877][ T1436] do_fast_syscall_32+0x32/0x70 [ 1682.483891][ T1436] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1682.483905][ T1436] RIP: 0023:0xf706efec [ 1682.483918][ T1436] Code: Unable to access opcode bytes at 0xf706efc2. [ 1682.483924][ T1436] RSP: 002b:00000000f543c50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 1682.483936][ T1436] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000006 [ 1682.483943][ T1436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1682.483949][ T1436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1682.483955][ T1436] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1682.483962][ T1436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1682.483976][ T1436] [ 1682.542530][ T1438] CIFS: Attempting to mount //127.0.0.1/share [ 1682.558002][ T1438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.561479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.564557][ T1438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1682.614056][ T1356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.727219][ T1356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.922883][ T1356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1682.927453][ T1356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1682.930769][ T1356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1682.935018][ T1356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1682.937766][ T1356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1682.943595][ T1356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1682.946728][ T1356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1682.951682][ T1356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1682.998087][ T1356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.012789][ T1356] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.019011][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.021902][T18232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.031049][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.033864][T18232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.038098][T15219] usb 12-1: new full-speed USB device number 14 using dummy_hcd [ 1683.221542][T15219] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1683.228621][T15219] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1683.233851][T15219] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1683.236790][T15219] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.256784][ T1438] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1683.326648][T32654] Bluetooth: hci1: command tx timeout [ 1683.357875][ T1356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.411219][ T1356] veth0_vlan: entered promiscuous mode [ 1683.420537][ T1356] veth1_vlan: entered promiscuous mode [ 1683.459193][T15219] usb 12-1: usb_control_msg returned -32 [ 1683.461032][T15219] usbtmc 12-1:16.0: can't read capabilities [ 1683.465916][ T1443] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it! [ 1683.502492][T15219] usb 12-1: USB disconnect, device number 14 [ 1683.541581][ T1356] veth0_macvtap: entered promiscuous mode [ 1683.549702][ T1356] veth1_macvtap: entered promiscuous mode [ 1683.597053][ T1356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.621954][ T1356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.640364][T32278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.643788][T32278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.654357][T32278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.657168][T32278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.891900][T18232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.897726][T18232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.942647][T18232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.946341][T18232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.332107][ T1486] FAULT_INJECTION: forcing a failure. [ 1684.332107][ T1486] name failslab, interval 1, probability 1, space 0, times 0 [ 1684.336327][ T1486] CPU: 1 UID: 0 PID: 1486 Comm: syz.3.6827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1684.336357][ T1486] Tainted: [L]=SOFTLOCKUP [ 1684.336361][ T1486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1684.336368][ T1486] Call Trace: [ 1684.336373][ T1486] [ 1684.336379][ T1486] dump_stack_lvl+0x100/0x190 [ 1684.336396][ T1486] should_fail_ex.cold+0x5/0xa [ 1684.336409][ T1486] should_failslab+0xc2/0x120 [ 1684.336425][ T1486] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1684.336441][ T1486] ? __alloc_skb+0x140/0x710 [ 1684.336457][ T1486] __alloc_skb+0x140/0x710 [ 1684.336470][ T1486] ? __alloc_skb+0x5b7/0x710 [ 1684.336484][ T1486] ? __pfx___alloc_skb+0x10/0x10 [ 1684.336497][ T1486] ? __pfx___nla_validate_parse+0x10/0x10 [ 1684.336511][ T1486] ? rcu_is_watching+0x12/0xc0 [ 1684.336524][ T1486] ? trace_kmalloc+0xeb/0x110 [ 1684.336542][ T1486] ip_vs_genl_get_cmd+0x181/0x9c0 [ 1684.336558][ T1486] ? __pfx_ip_vs_genl_get_cmd+0x10/0x10 [ 1684.336574][ T1486] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1684.336588][ T1486] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1684.336605][ T1486] genl_family_rcv_msg_doit+0x214/0x300 [ 1684.336621][ T1486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1684.336635][ T1486] ? genl_get_cmd+0x3e7/0x760 [ 1684.336651][ T1486] ? bpf_lsm_capable+0x9/0x10 [ 1684.336663][ T1486] ? security_capable+0x80/0x260 [ 1684.336678][ T1486] genl_rcv_msg+0x560/0x800 [ 1684.336694][ T1486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1684.336712][ T1486] ? __pfx_ip_vs_genl_get_cmd+0x10/0x10 [ 1684.336731][ T1486] netlink_rcv_skb+0x159/0x420 [ 1684.336743][ T1486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1684.336758][ T1486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1684.336775][ T1486] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1684.336789][ T1486] genl_rcv+0x28/0x40 [ 1684.336801][ T1486] netlink_unicast+0x585/0x850 [ 1684.336815][ T1486] ? __pfx_netlink_unicast+0x10/0x10 [ 1684.336831][ T1486] netlink_sendmsg+0x8b0/0xda0 [ 1684.336845][ T1486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1684.336859][ T1486] ? apparmor_socket_sendmsg+0x15b/0x270 [ 1684.336874][ T1486] ____sys_sendmsg+0xa4d/0xbe0 [ 1684.336885][ T1486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1684.336898][ T1486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1684.336915][ T1486] ___sys_sendmsg+0x190/0x1e0 [ 1684.336928][ T1486] ? __pfx____sys_sendmsg+0x10/0x10 [ 1684.336946][ T1486] ? find_held_lock+0x2b/0x80 [ 1684.336969][ T1486] __sys_sendmsg+0x160/0x210 [ 1684.336984][ T1486] ? __pfx___sys_sendmsg+0x10/0x10 [ 1684.337003][ T1486] ? __pfx_ksys_write+0x10/0x10 [ 1684.337017][ T1486] __do_fast_syscall_32+0xe7/0x970 [ 1684.337031][ T1486] ? lockdep_hardirqs_on+0x78/0x100 [ 1684.337045][ T1486] do_fast_syscall_32+0x32/0x70 [ 1684.337059][ T1486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1684.337073][ T1486] RIP: 0023:0xf6ffefec [ 1684.337089][ T1486] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 1684.337094][ T1486] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1684.337105][ T1486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 1684.337112][ T1486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1684.337118][ T1486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1684.337125][ T1486] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1684.337131][ T1486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1684.337145][ T1486] [ 1684.452659][ T1489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6798'. [ 1684.547499][ T1493] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6828'. [ 1684.579897][ T1498] futex_wake_op: syz.4.6830 tries to shift op by 32; fix this program [ 1684.646368][ T1487] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1684.648766][ T1500] syzkaller0: entered promiscuous mode [ 1684.649124][ T1487] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1684.652420][ T1500] syzkaller0: entered allmulticast mode [ 1684.654842][ T1487] vhci_hcd vhci_hcd.0: Device attached [ 1684.719813][ T1503] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6830'. [ 1684.961446][T29582] usb 38-1: SetAddress Request (66) to port 0 [ 1684.963719][T29582] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1685.226723][ T1501] vhci_hcd: connection reset by peer [ 1685.231674][T19730] vhci_hcd vhci_hcd.0: stop threads [ 1685.233760][T19730] vhci_hcd vhci_hcd.0: release socket [ 1685.236218][T19730] vhci_hcd vhci_hcd.0: disconnect device [ 1685.551271][T32654] Bluetooth: hci1: command tx timeout [ 1686.150484][T20169] net_ratelimit: 12 callbacks suppressed [ 1686.150528][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.405373][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1686.860958][ T1529] fuse: Bad value for 'fd' [ 1687.259123][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.641534][ T1549] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6847'. [ 1687.772306][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.782469][T32654] Bluetooth: hci1: command tx timeout [ 1688.391771][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.607694][ T1557] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1688.647741][ T1557] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1688.651375][ T1557] overlayfs: failed to look up (tracing) for ino (-66) [ 1688.657749][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.668533][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.947507][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.970528][ T1556] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1688.972669][ T1556] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1688.976725][ T1556] vhci_hcd vhci_hcd.0: Device attached [ 1689.054869][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.060545][T18196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.064352][ T1574] ipvlan2: entered promiscuous mode [ 1689.064387][ T1574] ipvlan2: entered allmulticast mode [ 1689.064401][ T1574] gretap0: entered allmulticast mode [ 1689.068137][ T1574] team0: Device ipvlan2 failed to register rx_handler [ 1689.070873][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.077268][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1689.200208][ T1566] vhci_hcd: connection closed [ 1689.200473][T19730] vhci_hcd vhci_hcd.7: stop threads [ 1689.207611][T19730] vhci_hcd vhci_hcd.7: release socket [ 1689.210917][T19730] vhci_hcd vhci_hcd.7: disconnect device [ 1689.257943][T25462] usb 52-1: enqueue for inactive port 0 [ 1689.395293][ T1583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6855'. [ 1689.808692][T25462] usb usb52-port1: attempt power cycle [ 1690.006210][T32654] Bluetooth: hci1: command tx timeout [ 1690.250937][T14556] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1690.400645][T14556] usb 8-1: device descriptor read/64, error -71 [ 1690.424282][T29582] usb 38-1: device descriptor read/8, error -110 [ 1690.430449][T25462] usb usb52-port1: unable to enumerate USB device [ 1690.678346][T14556] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1690.817304][T14556] usb 8-1: device descriptor read/64, error -71 [ 1690.883068][T29582] usb usb38-port1: attempt power cycle [ 1690.939501][T14556] usb usb8-port1: attempt power cycle [ 1691.298229][T14556] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1691.320314][T14556] usb 8-1: device descriptor read/8, error -71 [ 1691.434183][ T1628] x_tables: duplicate underflow at hook 3 [ 1691.449556][ T1628] ./bus: Can't lookup blockdev [ 1691.575983][T14556] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1691.576636][T29582] usb usb38-port1: unable to enumerate USB device [ 1691.620308][T14556] usb 8-1: device descriptor read/8, error -71 [ 1691.644105][ T1639] ip6gre1: entered allmulticast mode [ 1691.647591][ T5841] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1691.704774][T31152] net_ratelimit: 97 callbacks suppressed [ 1691.704793][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.736451][T14556] usb usb8-port1: unable to enumerate USB device [ 1691.797723][ T1646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6875'. [ 1691.826801][ T1647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6873'. [ 1692.052595][ T1658] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1692.055279][ T1658] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1692.059254][ T1658] vhci_hcd vhci_hcd.0: Device attached [ 1692.175977][ T1669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1692.366732][T29582] usb 52-1: SetAddress Request (18) to port 0 [ 1692.368767][T29582] usb 52-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1692.391712][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.156035][T25462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.510287][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.608656][ T1659] vhci_hcd: connection reset by peer [ 1693.625594][T30582] vhci_hcd vhci_hcd.7: stop threads [ 1693.630575][T30582] vhci_hcd vhci_hcd.7: release socket [ 1693.675730][T30582] vhci_hcd vhci_hcd.7: disconnect device [ 1694.270573][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.305805][T25462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.631948][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.674140][ T1703] netlink: 'syz.3.6893': attribute type 2 has an invalid length. [ 1695.216794][T18197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.224199][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.235839][ T8260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1695.610216][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.613914][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.647466][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1695.683071][ T1720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6899'. [ 1696.000208][T14556] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 1696.092944][ T1727] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1696.156874][ T1727] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1696.160400][T14556] usb 9-1: Using ep0 maxpacket: 8 [ 1696.161311][ T1727] overlayfs: failed to look up (tracing) for ino (-66) [ 1696.167302][T14556] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.178249][T14556] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.188875][T14556] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1696.194949][T14556] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1696.203171][T14556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.220909][T14556] usb 9-1: config 0 descriptor?? [ 1696.447198][T14556] usbhid 9-1:0.0: can't add hid device: -71 [ 1696.455802][T14556] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1696.469155][T14556] usb 9-1: USB disconnect, device number 119 [ 1697.222634][ T1732] vhci_hcd vhci_hcd.0: port 0 already used [ 1697.603199][T25462] net_ratelimit: 4 callbacks suppressed [ 1697.603217][T25462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.635416][ T8260] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 1697.777362][ T1742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.781107][T29582] usb 52-1: device descriptor read/8, error -110 [ 1697.787120][ T1742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.808604][ T8260] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.812914][ T8260] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1697.820115][ T8260] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1697.823747][ T8260] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.826325][ T8260] usb 9-1: Product: syz [ 1697.828101][ T8260] usb 9-1: Manufacturer: syz [ 1697.829784][ T8260] usb 9-1: SerialNumber: syz [ 1697.836737][ T8260] cdc_mbim 9-1:1.0: skipping garbage [ 1697.947611][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.984937][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.145273][ T1738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1698.235704][T29582] usb usb52-port1: attempt power cycle [ 1698.716562][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.854693][T29582] usb usb52-port1: unable to enumerate USB device [ 1698.861778][ T1768] syzkaller1: entered promiscuous mode [ 1698.864108][ T1768] syzkaller1: entered allmulticast mode [ 1698.897131][ T1738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1698.902591][ T8260] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 1698.919800][ T8260] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 1698.944903][ T8260] wwan wwan0: port wwan0mbim0 attached [ 1698.976177][ T8260] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 1a:6e:3b:09:d3:e7 [ 1699.054092][ T1773] syzkaller0: entered promiscuous mode [ 1699.056677][ T1773] syzkaller0: entered allmulticast mode [ 1699.069374][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.072908][ T1773] tipc: Enabled bearer , priority 0 [ 1699.116906][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.119057][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.121501][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.123791][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.126194][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.128334][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.131095][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.133217][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.135454][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.137646][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.139779][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.141900][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.144473][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.146710][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.149671][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.152322][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.155039][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.157624][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.160228][ C2] cdc_mbim 9-1:1.0: nonzero urb status received: -71 [ 1699.162847][ C2] cdc_mbim 9-1:1.0: wdm_int_callback - 0 bytes [ 1699.183299][ T1738] libceph: resolve '400' (ret=-3): failed [ 1699.189285][ T8260] usb 9-1: USB disconnect, device number 120 [ 1699.198589][ T8260] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1699.339928][ T1791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.363144][ T8260] wwan wwan0: port wwan0mbim0 disconnected [ 1699.401685][ T1791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.469797][ T1795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.504591][ T1797] FAULT_INJECTION: forcing a failure. [ 1699.504591][ T1797] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1699.509463][ T1797] CPU: 0 UID: 0 PID: 1797 Comm: syz.7.6919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.509486][ T1797] Tainted: [L]=SOFTLOCKUP [ 1699.509491][ T1797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1699.509500][ T1797] Call Trace: [ 1699.509506][ T1797] [ 1699.509513][ T1797] dump_stack_lvl+0x100/0x190 [ 1699.509534][ T1797] should_fail_ex.cold+0x5/0xa [ 1699.509548][ T1797] ? prepare_alloc_pages+0x16d/0x5f0 [ 1699.509570][ T1797] should_fail_alloc_page+0xeb/0x140 [ 1699.509591][ T1797] prepare_alloc_pages+0x1f0/0x5f0 [ 1699.509614][ T1797] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1699.509631][ T1797] ? vfs_write+0x6ac/0x1050 [ 1699.509645][ T1797] ? asm_int80_emulation+0x1a/0x20 [ 1699.509670][ T1797] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1699.509699][ T1797] ? trace_kmalloc+0xeb/0x110 [ 1699.509718][ T1797] ? __kasan_kmalloc+0xaa/0xb0 [ 1699.509736][ T1797] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 1699.509755][ T1797] ? __kasan_slab_alloc+0x89/0x90 [ 1699.509772][ T1797] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1699.509794][ T1797] ? policy_nodemask+0xed/0x4f0 [ 1699.509815][ T1797] alloc_pages_mpol+0x1fb/0x540 [ 1699.509836][ T1797] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1699.509854][ T1797] ? __alloc_skb+0x5b7/0x710 [ 1699.509872][ T1797] ? __pfx___alloc_skb+0x10/0x10 [ 1699.509894][ T1797] alloc_pages_noprof+0x1a/0x160 [ 1699.509907][ T1797] alloc_skb_with_frags+0x4e7/0x760 [ 1699.509931][ T1797] ? kernel_text_address+0x8d/0x100 [ 1699.509954][ T1797] sock_alloc_send_pskb+0x801/0x980 [ 1699.509978][ T1797] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1699.509995][ T1797] ? _parse_integer_limit+0x1ac/0x220 [ 1699.510020][ T1797] tun_get_user+0x904/0x3c20 [ 1699.510060][ T1797] ? __pfx_tun_get_user+0x10/0x10 [ 1699.510078][ T1797] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1699.510099][ T1797] ? find_held_lock+0x2b/0x80 [ 1699.510116][ T1797] ? tun_get+0x191/0x370 [ 1699.510130][ T1797] ? tun_get+0x191/0x370 [ 1699.510149][ T1797] tun_chr_write_iter+0xdc/0x200 [ 1699.510171][ T1797] vfs_write+0x6ac/0x1050 [ 1699.510185][ T1797] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1699.510202][ T1797] ? __pfx_vfs_write+0x10/0x10 [ 1699.510214][ T1797] ? find_held_lock+0x2b/0x80 [ 1699.510244][ T1797] ksys_write+0x12a/0x250 [ 1699.510257][ T1797] ? __pfx_ksys_write+0x10/0x10 [ 1699.510276][ T1797] do_int80_emulation+0x14b/0x720 [ 1699.510297][ T1797] asm_int80_emulation+0x1a/0x20 [ 1699.510311][ T1797] RIP: 0023:0xf71872eb [ 1699.510323][ T1797] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1699.510337][ T1797] RSP: 002b:00000000f543d44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1699.510351][ T1797] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 1699.510361][ T1797] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1699.510370][ T1797] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1699.510378][ T1797] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1699.510387][ T1797] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1699.510406][ T1797] [ 1699.675631][ T42] audit: type=1804 audit(2000000853.165:28323): pid=1799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6920" name="/newroot/27/file0" dev="tmpfs" ino=163 res=1 errno=0 [ 1699.691110][ T1802] netlink: 'syz.7.6921': attribute type 2 has an invalid length. [ 1699.756347][ T1806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6923'. [ 1699.826731][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.868963][ T1811] input: syz1 as /devices/virtual/input/input124 [ 1699.948808][ T1813] gretap2: entered allmulticast mode [ 1699.960862][ T1813] team0: Port device gretap2 added [ 1699.991171][ T1808] lo speed is unknown, defaulting to 1000 [ 1700.001512][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.149595][T32654] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1700.167973][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.263824][ T5913] tipc: Node number set to 3145728 [ 1700.950403][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1701.010311][ T1838] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1701.403041][ T1845] netlink: 'syz.0.6932': attribute type 10 has an invalid length. [ 1701.429273][ T1845] team0: Port device dummy0 added [ 1702.114280][T14555] kernel read not supported for file /vcsa (pid: 14555 comm: kworker/2:10) [ 1702.736648][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1703.170396][T31152] net_ratelimit: 5 callbacks suppressed [ 1703.170411][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.416129][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1703.427271][ T8260] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 1703.514718][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1703.531303][ T1879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.534389][ T1879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.649077][ T1883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1703.685685][ T1883] vlan1: entered allmulticast mode [ 1703.688066][ T1883] dummy0: entered allmulticast mode [ 1703.691216][ T8260] usb 12-1: Using ep0 maxpacket: 32 [ 1703.724904][ T1883] bridge0: port 3(vlan1) entered blocking state [ 1703.729784][ T1883] bridge0: port 3(vlan1) entered disabled state [ 1703.747750][ T1883] vlan1: entered promiscuous mode [ 1703.749750][ T1883] dummy0: entered promiscuous mode [ 1704.216373][ T1900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6951'. [ 1704.228484][T14555] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 1704.239213][T31152] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1704.282178][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.399194][T14555] usb 9-1: Using ep0 maxpacket: 8 [ 1704.402271][T14555] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.406039][T14555] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.409265][T14555] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1704.412037][T14555] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1704.415353][T14555] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.420612][T31152] usb 8-1: Using ep0 maxpacket: 8 [ 1704.422552][T14555] usb 9-1: config 0 descriptor?? [ 1704.425597][T31152] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.441909][T31152] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.445268][T31152] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1704.447490][T31152] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1704.450383][T31152] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.458295][T31152] usb 8-1: config 0 descriptor?? [ 1704.624278][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.646451][T14555] usbhid 9-1:0.0: can't add hid device: -71 [ 1704.648543][T14555] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1704.655545][T14555] usb 9-1: USB disconnect, device number 121 [ 1704.685067][T31152] usbhid 8-1:0.0: can't add hid device: -71 [ 1704.688256][T31152] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1704.695271][T31152] usb 8-1: USB disconnect, device number 92 [ 1704.702192][T14574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.329065][ T1904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.335908][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.382742][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.447971][ T1906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6953'. [ 1705.469677][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.764921][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.799194][T31152] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1705.980874][T31152] usb 8-1: Using ep0 maxpacket: 32 [ 1706.115714][T31152] usb 8-1: config 0 has no interfaces? [ 1706.222916][T31152] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1706.237330][T31152] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1706.240868][T31152] usb 8-1: Product: syz [ 1706.242565][T31152] usb 8-1: Manufacturer: syz [ 1706.244498][T31152] usb 8-1: SerialNumber: syz [ 1706.249000][T31152] usb 8-1: config 0 descriptor?? [ 1706.257803][ T8260] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1706.264637][ T8260] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 1706.267995][ T8260] usb 12-1: can't read configurations, error -71 [ 1706.322442][ T1933] 9p: Bad value for 'wfdno' [ 1706.429030][T32654] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1706.481729][T31152] usb 8-1: USB disconnect, device number 93 [ 1706.718329][ T8260] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 1706.909358][ T8260] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 1706.935109][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.959490][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1706.979242][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.019532][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.039146][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.048446][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.113472][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.136902][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.150144][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.202622][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.212086][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.241123][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.285832][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.301189][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.310531][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.343307][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.352832][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.367894][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.434136][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.444826][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.465901][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.526495][ T8260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.534192][ T8260] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1707.542696][ T8260] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1707.570595][ T8260] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1707.579928][ T8260] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1707.591674][ T8260] usb 12-1: Product: syz [ 1707.593575][ T8260] usb 12-1: Manufacturer: syz [ 1707.595368][ T8260] usb 12-1: SerialNumber: syz [ 1707.613686][ T8260] usb 12-1: config 0 descriptor?? [ 1707.630181][ T8260] yurex 12-1:0.0: Could not find endpoints [ 1707.679285][ T1958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6964'. [ 1707.803835][ T1964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6965'. [ 1707.933295][ T42] audit: type=1326 audit(2000000860.895:28324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1963 comm="syz.3.6965" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf6ffefec code=0x0 [ 1707.999654][ T1970] tipc: Enabling of bearer rejected, already enabled [ 1708.024612][ T8260] usb 12-1: USB disconnect, device number 16 [ 1708.360048][ T1971] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1708.370378][ T1971] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1708.387078][ T1971] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1708.393554][ T1971] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1708.398202][ T1971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1708.410114][ T1971] bridge0: port 3(vlan1) entered blocking state [ 1708.412292][ T1971] bridge0: port 3(vlan1) entered forwarding state [ 1708.776776][ T1982] syzkaller0: entered promiscuous mode [ 1708.779686][ T1982] syzkaller0: entered allmulticast mode [ 1708.803408][T31152] net_ratelimit: 6 callbacks suppressed [ 1708.803428][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.070847][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.294498][ T1999] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 1709.438951][ T2001] netlink: 'syz.7.6975': attribute type 13 has an invalid length. [ 1709.547787][ T2003] comedi comedi3: comedi_config --init_data is deprecated [ 1709.561083][T14555] usb 9-1: new full-speed USB device number 122 using dummy_hcd [ 1709.759780][T14555] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1709.760174][T14555] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1709.761153][T14555] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1709.761289][T14555] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.925908][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.094925][ T50] IPVS: starting estimator thread 0... [ 1710.186117][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.191248][ T2008] IPVS: using max 28 ests per chain, 67200 per kthread [ 1710.215103][T14555] usb 9-1: usb_control_msg returned -32 [ 1710.238160][T14555] usbtmc 9-1:16.0: can't read capabilities [ 1710.280309][T14574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.689092][ T2011] program syz.4.6974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1710.961042][T14555] usb 9-1: USB disconnect, device number 122 [ 1711.024852][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.195715][T14574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.199247][T32654] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 1711.281201][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1711.567014][ T2029] 9p: Bad value for 'rfdno' [ 1712.075980][ T2049] netlink: 'syz.0.6992': attribute type 10 has an invalid length. [ 1712.089618][ T2049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1712.094668][ T2049] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1712.098396][ T2049] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6992'. [ 1712.125509][ T2049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.136979][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.145116][ T2049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.153359][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1712.153603][ T2049] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1712.167172][ T2049] bond0 (unregistering): Released all slaves [ 1712.403436][T18204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1713.041901][ T2058] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1713.044768][ T2058] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1713.049356][ T2058] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1713.053562][ T2058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1713.056321][ T2058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1713.064740][ T2058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1713.070860][ T2058] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1713.073974][ T2058] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1713.077016][ T2058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1713.082274][ T2058] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1713.143134][ T2070] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.145089][ T2070] binder: 2068:2070 ioctl 4018620d 80000100 returned -16 [ 1713.149677][ T2070] fuse: Bad value for 'fd' [ 1713.177538][ C2] hpet: Lost 1 RTC interrupts [ 1713.198470][ T2070] binder: BINDER_SET_CONTEXT_MGR already set [ 1713.201081][ T2070] binder: 2068:2070 ioctl 4018620d 80004a80 returned -16 [ 1713.204918][ T2070] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1713.354189][T14574] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 1714.065802][T14574] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1714.070783][T14574] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 1714.072966][T14574] usb 12-1: can't read configurations, error -71 [ 1714.118308][ T2083] netlink: 'syz.7.7004': attribute type 1 has an invalid length. [ 1714.120825][ T2083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7004'. [ 1714.193724][ T2089] netlink: 'syz.0.7006': attribute type 83 has an invalid length. [ 1714.232998][T32654] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1714.444718][T18235] net_ratelimit: 11 callbacks suppressed [ 1714.444738][T18235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.446005][T31152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.451497][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.461444][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1714.524340][ C2] hpet: Lost 1 RTC interrupts [ 1714.556220][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7005'. [ 1714.620243][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.213641][T32654] Bluetooth: hci1: command 0x0c1a tx timeout [ 1715.215871][T32654] Bluetooth: hci0: command 0x0405 tx timeout [ 1715.555798][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.729614][T18204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.946423][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.949966][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.959962][ T2115] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 1715.962597][ T2115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1715.965903][ T2115] vhci_hcd vhci_hcd.0: Device attached [ 1715.984942][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.022704][ T2118] vhci_hcd: connection closed [ 1716.024203][T14750] vhci_hcd vhci_hcd.7: stop threads [ 1716.029395][T14750] vhci_hcd vhci_hcd.7: release socket [ 1716.034279][T14750] vhci_hcd vhci_hcd.7: disconnect device [ 1716.944124][T24524] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1717.284138][ T2131] lapbether: lapb_data_request error - 4 [ 1717.302954][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7019'. [ 1717.306238][ T2139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.309380][ T2139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.315795][ T2139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.318238][ T2139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.407009][T25700] libceph: connect (1)[c::]:6789 error -13 [ 1717.409663][T25700] libceph: mon0 (1)[c::]:6789 connect error [ 1717.447107][T32654] Bluetooth: hci1: command 0x0c1a tx timeout [ 1717.449506][T24524] Bluetooth: hci0: command 0x0405 tx timeout [ 1717.682864][T25700] libceph: connect (1)[c::]:6789 error -13 [ 1717.685670][T25700] libceph: mon0 (1)[c::]:6789 connect error [ 1717.877103][ T2160] binder: binder_mmap: 2159 80a76000-80a7a000 bad vm_flags failed -1 [ 1717.880809][ T2160] binder: 2159:2160 ioctl 8943 80002280 returned -22 [ 1717.903933][ T8260] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 1718.000676][ T2131] ceph: No mds server is up or the cluster is laggy [ 1718.111154][ T8260] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1718.120061][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.123773][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.126847][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.161378][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.173681][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.177675][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.181417][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.186167][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.192698][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.196877][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.200583][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.201870][T32654] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1718.212472][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.215733][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.219963][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.223336][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.227839][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.231020][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.234386][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.237297][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.241778][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.244925][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.248209][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.251327][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.262528][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.267281][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.274525][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.278381][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.283417][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.286556][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.291566][ T8260] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1718.296327][ T8260] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1718.305349][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1718.312458][ T8260] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1718.317335][ T8260] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1718.323971][ T8260] usb 9-1: Product: syz [ 1718.325748][ T8260] usb 9-1: Manufacturer: syz [ 1718.327405][ T8260] usb 9-1: SerialNumber: syz [ 1718.332092][ T8260] usb 9-1: config 0 descriptor?? [ 1718.342050][ T8260] yurex 9-1:0.0: Could not find endpoints [ 1718.462304][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1718.477386][ T2175] 9pnet: p9_errstr2errno: server reported unknown error [ 1718.571784][T25700] usb 9-1: USB disconnect, device number 123 [ 1718.748684][ T2187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.756465][ T2187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.659050][T32654] Bluetooth: hci0: command 0x0405 tx timeout [ 1720.097626][T15357] net_ratelimit: 7 callbacks suppressed [ 1720.097641][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.219866][T32654] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1720.431025][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.522634][T27161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.527086][T14574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1720.758802][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.063175][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.208902][T15357] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.357060][T24524] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.374061][T24524] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.381332][T24524] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.395188][T24524] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.402584][T24524] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1721.550795][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.882312][T24524] Bluetooth: hci0: command 0x0405 tx timeout [ 1722.086484][ T2210] lo speed is unknown, defaulting to 1000 [ 1722.267305][ T34] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 1722.309765][T18578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.335262][ T5841] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.428623][ T34] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1722.432188][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.435627][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.439022][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.443327][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.446322][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.450941][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.453891][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.458076][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.461394][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.464914][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.467870][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.472344][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.475560][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.479012][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.482538][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.486523][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.489344][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.492806][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.495727][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.500544][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.504386][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.508335][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.511242][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.515677][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.518784][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.522082][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.525700][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.530042][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.533268][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.537603][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1722.541223][ T34] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1722.546655][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1722.551143][ T34] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1722.555153][ T34] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1722.558437][ T34] usb 9-1: Product: syz [ 1722.560093][ T34] usb 9-1: Manufacturer: syz [ 1722.561919][ T34] usb 9-1: SerialNumber: syz [ 1722.564200][ T5841] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.572217][ T34] usb 9-1: config 0 descriptor?? [ 1722.581997][ T34] yurex 9-1:0.0: Could not find endpoints [ 1722.625707][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.628322][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.631725][ T2210] bridge_slave_0: entered allmulticast mode [ 1722.635464][ T2210] bridge_slave_0: entered promiscuous mode [ 1722.639943][ T2210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.643795][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.646542][ T2210] bridge_slave_1: entered allmulticast mode [ 1722.649960][ T2210] bridge_slave_1: entered promiscuous mode [ 1722.662178][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.745764][ T5841] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.772460][ T2210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.795127][T14556] usb 9-1: USB disconnect, device number 124 [ 1722.811042][ T2210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.849836][ T5841] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.863980][ T2210] team0: Port device team_slave_0 added [ 1722.870813][ T2210] team0: Port device team_slave_1 added [ 1722.891268][ T2210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.894177][ T2210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.904604][ T2210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.910308][ T2210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.912825][ T2210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.923315][ T2210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1722.957307][ T2210] hsr_slave_0: entered promiscuous mode [ 1722.961145][ T2210] hsr_slave_1: entered promiscuous mode [ 1722.963340][ T2210] debugfs: 'hsr0' already exists in 'hsr' [ 1722.965649][ T2210] Cannot create hsr debugfs directory [ 1723.216804][ T5841] tipc: Resetting bearer [ 1723.427402][T32654] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1723.610887][T32654] Bluetooth: hci2: command tx timeout [ 1723.684387][ T5841] tipc: Disabling bearer [ 1723.704571][ T5841] bond0 (unregistering): Released all slaves [ 1723.723470][ T5841] bond1 (unregistering): Released all slaves [ 1723.749029][ T5841] bond2 (unregistering): Released all slaves [ 1723.756198][T18195] smbdirect: ib_dev[syz1] removed [ 1723.765946][ T5841] bond3 (unregistering): Released all slaves [ 1724.068665][ T5841] tipc: Left network mode [ 1724.081944][ T5841] IPVS: stopping backup sync thread 24749 ... [ 1724.460185][ T5454] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1724.552933][ T2290] fuse: Unknown parameter 'group_id<ïblV‡¿ékù/À˜åMqÈí00000000000000000000' [ 1724.683917][ T618] IPVS: starting estimator thread 0... [ 1724.845341][ T2298] IPVS: using max 27 ests per chain, 64800 per kthread [ 1724.914566][ T5841] veth0_to_team: left promiscuous mode [ 1724.917334][ T5841] veth1_macvtap: left promiscuous mode [ 1724.919584][ T5841] veth0_macvtap: left promiscuous mode [ 1724.923010][ T5841] veth1_vlan: left promiscuous mode [ 1724.925260][ T5841] veth0_vlan: left promiscuous mode [ 1725.476820][ T2310] netlink: 72 bytes leftover after parsing attributes in process `syz.7.7056'. [ 1725.480642][ T2310] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7056'. [ 1725.484588][ T2310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7056'. [ 1725.587509][T32654] Bluetooth: hci4: unexpected event for opcode 0x2040 [ 1725.658695][ T2302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.815637][T32654] Bluetooth: hci2: command tx timeout [ 1725.981144][ C2] hpet: Lost 1 RTC interrupts [ 1726.000089][T29582] net_ratelimit: 3 callbacks suppressed [ 1726.000103][T29582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.022843][ T2210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1726.033446][ T2210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.037140][ T2210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1726.079208][ T2210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.085494][ T2210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1726.146441][ T2210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.156567][ T2210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1726.164035][ T2210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.170471][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.423245][ T8260] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 1726.532684][ T5841] IPVS: stop unused estimator thread 0... [ 1726.594176][ T8260] usb 12-1: Using ep0 maxpacket: 8 [ 1726.597158][ T2210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.599176][ T8260] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.602641][ T8260] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1726.607356][ T2210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.610398][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1726.616147][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.618644][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.621370][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1726.623882][T18204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.637766][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.640470][T18204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.641820][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1726.664305][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1726.683512][ T8260] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1726.697465][ T8260] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.702730][ T8260] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1726.717515][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1726.728236][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.743781][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1726.747968][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1726.752623][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1726.754945][ T2348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.760889][ T2348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.764368][ T8260] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1726.770832][ T8260] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1726.773519][ T8260] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1726.777335][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1726.786004][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1726.797189][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1726.804168][ T8260] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1726.818539][ T8260] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1726.824072][ T8260] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1726.830377][ T8260] usb 12-1: string descriptor 0 read error: -22 [ 1726.832962][ T8260] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1726.836659][ T8260] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.859365][ T8260] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1726.932506][ T2210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1726.965583][ T2210] veth0_vlan: entered promiscuous mode [ 1726.973493][ T2210] veth1_vlan: entered promiscuous mode [ 1726.999935][ T2210] veth0_macvtap: entered promiscuous mode [ 1727.009702][ T2210] veth1_macvtap: entered promiscuous mode [ 1727.026328][ T2210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.034543][ T2210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1727.043566][T32281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.047188][T32281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.051486][T32281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.057412][T32281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.201559][ T34] usb 12-1: USB disconnect, device number 19 [ 1727.221877][T18204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.224550][T18204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.248645][T18196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.251321][T18196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.269837][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.527582][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.628881][ T2372] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1727.695053][ T618] usb 12-1: new low-speed USB device number 20 using dummy_hcd [ 1727.714853][ T2373] kernel kvm profiling enabled (shift: 0) [ 1727.858986][ T618] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.863819][ T618] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1727.874857][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.881932][ T618] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.897221][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1727.901976][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1727.905836][ T618] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1727.915576][ T618] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1727.922394][ T618] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.925550][ T618] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1727.932900][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.940758][ T618] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1727.948977][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1727.955218][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1727.962675][ T618] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1727.971807][ T618] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1727.978229][ T618] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 1727.981333][ T618] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1727.987745][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1727.995572][ T618] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1728.002788][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1728.008364][ T618] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1728.012296][ T618] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1728.017523][ T618] usb 12-1: config 168 interface 0 has no altsetting 0 [ 1728.044022][T32654] Bluetooth: hci2: command tx timeout [ 1728.402376][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.590501][ T2379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7066'. [ 1728.955834][ T8260] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 1729.053447][ T2387] syzkaller0: entered promiscuous mode [ 1729.056000][ T2387] syzkaller0: entered allmulticast mode [ 1729.133199][ T8260] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.141016][ T8260] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1729.153748][ T8260] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1729.161381][ T8260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.172087][ T8260] usb 9-1: config 0 descriptor?? [ 1729.410224][ T618] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1729.413890][ T618] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.439218][ T2389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1729.450538][ T618] usb 12-1: can't set config #168, error -71 [ 1729.454616][ T618] usb 12-1: USB disconnect, device number 20 [ 1729.513802][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1729.709562][ T2397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7072'. [ 1730.120690][T25700] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 1730.259515][T32654] Bluetooth: hci2: command tx timeout [ 1730.261455][T25700] usb 12-1: device descriptor read/64, error -71 [ 1730.516061][T25700] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 1730.604402][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.662494][T25700] usb 12-1: device descriptor read/64, error -71 [ 1730.772840][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.776673][T25700] usb usb12-port1: attempt power cycle [ 1731.135774][T25700] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 1731.164262][T25700] usb 12-1: device descriptor read/8, error -71 [ 1731.413683][T25700] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 1731.435991][T25700] usb 12-1: device descriptor read/8, error -71 [ 1731.553547][T25700] usb usb12-port1: unable to enumerate USB device [ 1731.717137][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.847745][T14556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.225942][ C2] hpet: Lost 1 RTC interrupts [ 1733.337843][ C2] hpet: Lost 1 RTC interrupts [ 1733.936386][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.021110][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.156578][T32654] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1734.182660][T31385] usb 9-1: USB disconnect, device number 125 [ 1734.897239][ T8260] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 1735.052451][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.561066][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.760375][ T8260] usb 9-1: Using ep0 maxpacket: 8 [ 1735.803081][ T8260] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.808294][ T8260] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.812416][ T8260] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1735.815161][ T8260] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1735.819026][ T8260] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.826418][ T8260] usb 9-1: config 0 descriptor?? [ 1736.075995][ T8260] usbhid 9-1:0.0: can't add hid device: -71 [ 1736.086048][ T8260] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1736.105410][ T8260] usb 9-1: USB disconnect, device number 126 [ 1736.169204][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.245733][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.322647][ T2446] netlink: 860 bytes leftover after parsing attributes in process `syz.3.7082'. [ 1736.576941][ T2463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1736.864702][ T2469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1736.866907][ T2469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1736.874187][ T2469] vhci_hcd vhci_hcd.0: Device attached [ 1737.184475][ T50] usb 38-1: SetAddress Request (70) to port 0 [ 1737.187112][ T50] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 1737.270417][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.560476][ T2470] vhci_hcd: connection reset by peer [ 1737.565358][T32278] vhci_hcd vhci_hcd.0: stop threads [ 1737.567091][T32278] vhci_hcd vhci_hcd.0: release socket [ 1737.577760][T32278] vhci_hcd vhci_hcd.0: disconnect device [ 1737.595829][ T2484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1737.600378][ T2484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7090'. [ 1738.391949][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.808693][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.492779][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.065991][T32654] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 1740.555523][ T2533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7104'. [ 1740.607891][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.796237][T14555] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1741.000170][T14555] usb 8-1: Using ep0 maxpacket: 32 [ 1741.130700][T14555] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1741.141599][T14555] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1741.145323][T14555] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1741.157305][T14555] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1741.166648][T14555] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1741.174220][T14555] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1741.220063][T14555] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1741.250327][T14555] usb 8-1: Product: syz [ 1741.267842][T14555] usb 8-1: Manufacturer: syz [ 1741.283955][T14555] usb 8-1: SerialNumber: syz [ 1741.717789][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.750026][T14555] usb 8-1: config 0 descriptor?? [ 1741.774140][T14555] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1741.821162][T14555] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1742.043828][ T2558] syzkaller0: entered promiscuous mode [ 1742.045656][ T2558] syzkaller0: entered allmulticast mode [ 1742.151821][ T42] audit: type=1400 audit(2000000892.909:28325): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A22 pid=2520 comm="syz.3.7101" [ 1742.305176][T15357] usb 8-1: USB disconnect, device number 94 [ 1742.305175][ C3] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 1742.309141][ T2526] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1742.318624][ T618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.320767][ T2528] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1742.337906][T15357] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 1742.582539][ T50] usb 38-1: device descriptor read/8, error -110 [ 1742.827346][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1742.988264][ T2526] lo speed is unknown, defaulting to 1000 [ 1743.009191][ T50] usb usb38-port1: attempt power cycle [ 1743.286336][ T2580] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7110'. [ 1743.479256][ C2] hpet: Lost 1 RTC interrupts [ 1743.522307][ T2588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1743.530513][ T2588] sctp: [Deprecated]: syz.4.7112 (pid 2588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1743.530513][ T2588] Use struct sctp_sack_info instead [ 1743.566874][ T2589] fuse: blksize only supported for fuseblk [ 1743.606616][ T42] audit: type=1326 audit(2000000894.219:28326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.638701][ T42] audit: type=1326 audit(2000000894.219:28327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.648510][ T42] audit: type=1326 audit(2000000894.219:28328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71872eb code=0x7ffc0000 [ 1743.657859][ T42] audit: type=1326 audit(2000000894.219:28329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.667843][ T42] audit: type=1326 audit(2000000894.228:28330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.676880][ T42] audit: type=1326 audit(2000000894.228:28331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.686770][ T42] audit: type=1326 audit(2000000894.228:28332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.696394][ T42] audit: type=1326 audit(2000000894.228:28333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2578 comm="syz.7.7110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 1743.728789][ T50] usb usb38-port1: unable to enumerate USB device [ 1744.419209][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.723211][ T2627] FAULT_INJECTION: forcing a failure. [ 1744.723211][ T2627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.728080][ T2627] CPU: 2 UID: 0 PID: 2627 Comm: syz.7.7115 Tainted: G L syzkaller #0 PREEMPT(full) [ 1744.728109][ T2627] Tainted: [L]=SOFTLOCKUP [ 1744.728113][ T2627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1744.728120][ T2627] Call Trace: [ 1744.728126][ T2627] [ 1744.728131][ T2627] dump_stack_lvl+0x100/0x190 [ 1744.728147][ T2627] should_fail_ex.cold+0x5/0xa [ 1744.728161][ T2627] _copy_from_user+0x2e/0xd0 [ 1744.728178][ T2627] get_compat_msghdr+0xb3/0x480 [ 1744.728196][ T2627] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1744.728218][ T2627] ___sys_sendmsg+0x1b6/0x1e0 [ 1744.728232][ T2627] ? __pfx____sys_sendmsg+0x10/0x10 [ 1744.728250][ T2627] ? find_held_lock+0x2b/0x80 [ 1744.728286][ T2627] __sys_sendmsg+0x160/0x210 [ 1744.728302][ T2627] ? __pfx___sys_sendmsg+0x10/0x10 [ 1744.728321][ T2627] ? __pfx_ksys_write+0x10/0x10 [ 1744.728335][ T2627] __do_fast_syscall_32+0xe7/0x970 [ 1744.728350][ T2627] ? lockdep_hardirqs_on+0x78/0x100 [ 1744.728364][ T2627] do_fast_syscall_32+0x32/0x70 [ 1744.728379][ T2627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.728393][ T2627] RIP: 0023:0xf704efec [ 1744.728408][ T2627] Code: Unable to access opcode bytes at 0xf704efc2. [ 1744.728413][ T2627] RSP: 002b:00000000f543d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1744.728425][ T2627] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 1744.728432][ T2627] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.728438][ T2627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.728445][ T2627] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1744.728451][ T2627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.728465][ T2627] [ 1745.135485][T15357] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 1745.564200][T14574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.572752][T14555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.926035][T15357] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 1745.942109][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1745.947938][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1745.951508][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1745.955284][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1745.960553][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1745.969427][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1745.978656][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1745.982368][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1745.985371][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1745.997247][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.003853][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.007643][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.011115][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1746.014882][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.019010][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.023375][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.026900][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1746.030249][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.035726][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.039522][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.042951][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1746.046359][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.053970][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.064137][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.067810][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1746.071724][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.076656][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.080277][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.083977][T15357] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1746.087924][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1746.091686][T15357] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1746.095520][T15357] usb 12-1: config 0 interface 0 has no altsetting 0 [ 1746.100374][T15357] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1746.106449][ T2643] FAULT_INJECTION: forcing a failure. [ 1746.106449][ T2643] name failslab, interval 1, probability 1, space 0, times 0 [ 1746.107145][T15357] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1746.116014][ T2643] CPU: 1 UID: 0 PID: 2643 Comm: syz.3.7120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1746.116043][ T2643] Tainted: [L]=SOFTLOCKUP [ 1746.116049][ T2643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1746.116058][ T2643] Call Trace: [ 1746.116065][ T2643] [ 1746.116073][ T2643] dump_stack_lvl+0x100/0x190 [ 1746.116100][ T2643] should_fail_ex.cold+0x5/0xa [ 1746.116123][ T2643] should_failslab+0xc2/0x120 [ 1746.116146][ T2643] __kmalloc_noprof+0xfc/0x820 [ 1746.116171][ T2643] ? tomoyo_encode2+0xfb/0x3c0 [ 1746.116201][ T2643] tomoyo_encode2+0xfb/0x3c0 [ 1746.116227][ T2643] tomoyo_encode+0x29/0x50 [ 1746.116252][ T2643] tomoyo_realpath_from_path+0x18c/0x690 [ 1746.116281][ T2643] tomoyo_path_number_perm+0x23c/0x580 [ 1746.116301][ T2643] ? tomoyo_path_number_perm+0x22e/0x580 [ 1746.116324][ T2643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1746.116346][ T2643] ? get_pid_task+0x106/0x250 [ 1746.116391][ T2643] ? find_held_lock+0x2b/0x80 [ 1746.116419][ T2643] ? __fget_files+0x215/0x3d0 [ 1746.116436][ T2643] ? hook_file_ioctl_common+0x140/0x440 [ 1746.116459][ T2643] ? __fget_files+0x215/0x3d0 [ 1746.116481][ T2643] ? __fget_files+0x21f/0x3d0 [ 1746.116501][ T2643] security_file_ioctl_compat+0xd3/0x230 [ 1746.116526][ T2643] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1746.116554][ T2643] __do_fast_syscall_32+0xe7/0x970 [ 1746.116578][ T2643] ? lockdep_hardirqs_on+0x78/0x100 [ 1746.116599][ T2643] do_fast_syscall_32+0x32/0x70 [ 1746.116623][ T2643] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1746.116645][ T2643] RIP: 0023:0xf7f22fec [ 1746.116665][ T2643] Code: Unable to access opcode bytes at 0xf7f22fc2. [ 1746.116674][ T2643] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1746.116690][ T2643] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000402c542d [ 1746.116703][ T2643] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1746.116713][ T2643] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1746.116722][ T2643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1746.116733][ T2643] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.116756][ T2643] [ 1746.116774][ T2643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1746.122174][T15357] usb 12-1: Product: syz [ 1746.191977][T15357] usb 12-1: Manufacturer: syz [ 1746.194135][T15357] usb 12-1: SerialNumber: syz [ 1746.198707][T15357] usb 12-1: config 0 descriptor?? [ 1746.208818][T15357] yurex 12-1:0.0: Could not submitting URB [ 1746.211236][T15357] yurex 12-1:0.0: probe with driver yurex failed with error -5 [ 1746.231390][ T2658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7124'. [ 1746.236513][ T2658] vlan0: entered promiscuous mode [ 1746.247331][ T2658] tipc: Started in network mode [ 1746.248958][ T2658] tipc: Node identity 4246, cluster identity 4711 [ 1746.251068][ T2658] tipc: Node number set to 16966 [ 1746.442982][T15357] usb 12-1: USB disconnect, device number 25 [ 1746.503179][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.510448][T29582] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.697756][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.720243][T14750] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.901875][T14750] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.947817][ T2672] new mount options do not match the existing superblock, will be ignored [ 1746.984713][T24524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1747.022860][T14750] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.048071][T24524] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1747.055467][T24524] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1747.061533][T24524] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1747.065125][T24524] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1747.344996][T14750] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.434322][ T2690] can0: slcan on ttyS3. [ 1747.785172][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.870328][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1747.883890][T14750] bridge_slave_1: left allmulticast mode [ 1747.885923][T14750] bridge_slave_1: left promiscuous mode [ 1747.887831][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.895550][T14750] bridge_slave_0: left allmulticast mode [ 1747.898648][T14750] bridge_slave_0: left promiscuous mode [ 1747.904132][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.333193][ T2685] can0 (unregistered): slcan off ttyS3. [ 1748.438645][T14750] tipc: Left network mode [ 1748.480391][ T2676] lo speed is unknown, defaulting to 1000 [ 1748.639188][T32654] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1748.900296][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.940908][ T2745] FAULT_INJECTION: forcing a failure. [ 1748.940908][ T2745] name failslab, interval 1, probability 1, space 0, times 0 [ 1748.945663][ T2745] CPU: 2 UID: 0 PID: 2745 Comm: syz.7.7140 Tainted: G L syzkaller #0 PREEMPT(full) [ 1748.945682][ T2745] Tainted: [L]=SOFTLOCKUP [ 1748.945686][ T2745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1748.945693][ T2745] Call Trace: [ 1748.945698][ T2745] [ 1748.945703][ T2745] dump_stack_lvl+0x100/0x190 [ 1748.945721][ T2745] should_fail_ex.cold+0x5/0xa [ 1748.945733][ T2745] should_failslab+0xc2/0x120 [ 1748.945749][ T2745] __kmalloc_noprof+0xfc/0x820 [ 1748.945762][ T2745] ? __pfx_dynamic_dname+0x10/0x10 [ 1748.945778][ T2745] ? tomoyo_encode2+0xfb/0x3c0 [ 1748.945798][ T2745] tomoyo_encode2+0xfb/0x3c0 [ 1748.945816][ T2745] tomoyo_encode+0x29/0x50 [ 1748.945831][ T2745] tomoyo_realpath_from_path+0x18c/0x690 [ 1748.945851][ T2745] tomoyo_path_number_perm+0x23c/0x580 [ 1748.945866][ T2745] ? tomoyo_path_number_perm+0x22e/0x580 [ 1748.945881][ T2745] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1748.945895][ T2745] ? get_pid_task+0x106/0x250 [ 1748.945922][ T2745] ? find_held_lock+0x2b/0x80 [ 1748.945936][ T2745] ? __fget_files+0x215/0x3d0 [ 1748.945945][ T2745] ? hook_file_ioctl_common+0x140/0x440 [ 1748.945965][ T2745] ? __fget_files+0x215/0x3d0 [ 1748.945978][ T2745] ? __fget_files+0x21f/0x3d0 [ 1748.945990][ T2745] security_file_ioctl_compat+0xd3/0x230 [ 1748.946006][ T2745] __ia32_compat_sys_ioctl+0xc2/0x360 [ 1748.946024][ T2745] __do_fast_syscall_32+0xe7/0x970 [ 1748.946039][ T2745] ? lockdep_hardirqs_on+0x78/0x100 [ 1748.946053][ T2745] do_fast_syscall_32+0x32/0x70 [ 1748.946067][ T2745] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1748.946082][ T2745] RIP: 0023:0xf704efec [ 1748.946098][ T2745] Code: Unable to access opcode bytes at 0xf704efc2. [ 1748.946103][ T2745] RSP: 002b:00000000f541c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1748.946114][ T2745] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c008ae88 [ 1748.946121][ T2745] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.946128][ T2745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.946134][ T2745] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1748.946141][ T2745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.946155][ T2745] [ 1748.946224][ T2745] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1749.053714][ T5454] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1749.120720][ T2749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1749.212806][ T2676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.218525][ T2676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1749.221520][ T2676] bridge_slave_0: entered allmulticast mode [ 1749.225420][ T2676] bridge_slave_0: entered promiscuous mode [ 1749.232644][ T2676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.235298][ T2676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.239148][ T2676] bridge_slave_1: entered allmulticast mode [ 1749.250558][ T2676] bridge_slave_1: entered promiscuous mode [ 1749.323503][T32654] Bluetooth: hci1: command tx timeout [ 1749.459835][ T5454] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1749.505383][ T2676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.525970][ T2676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.527864][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7142'. [ 1749.558498][T14750] hsr_slave_0: left promiscuous mode [ 1749.561498][T14750] hsr_slave_1: left promiscuous mode [ 1749.563858][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.566543][T14750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.575117][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.578059][T14750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.585376][ T2766] vhci_hcd vhci_hcd.0: port 0 already used [ 1749.588656][T14750] veth1_macvtap: left promiscuous mode [ 1749.590469][T14750] veth0_macvtap: left promiscuous mode [ 1749.596061][T14750] veth1_vlan: left promiscuous mode [ 1749.753541][T25700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.901268][T14750] team0 (unregistering): Port device team_slave_1 removed [ 1749.910522][ T2785] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7146'. [ 1749.915557][T14750] team0 (unregistering): Port device team_slave_0 removed [ 1749.976273][ T2787] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7146'. [ 1749.994948][T14750] team0 (unregistering): Port device dummy0 removed [ 1750.007749][T20169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.061019][ T2676] team0: Port device team_slave_0 added [ 1750.072494][ T2676] team0: Port device team_slave_1 added [ 1750.139540][ T2676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.141822][ T2676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.150026][ T2676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.167055][ T2676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1750.175251][ T2676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.208942][ T2676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.264069][ T2676] hsr_slave_0: entered promiscuous mode [ 1750.268291][ T2676] hsr_slave_1: entered promiscuous mode [ 1750.270850][ T2676] debugfs: 'hsr0' already exists in 'hsr' [ 1750.273553][ T2676] Cannot create hsr debugfs directory [ 1750.276969][ T5454] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1750.551666][ T2676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1750.556798][ T2676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1750.559659][ T2676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1750.564718][ T2676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1750.568415][ T2676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1750.592784][ T2676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1750.598702][ T2676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1750.613475][ T2676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1750.619888][ T2811] IPVS: Error connecting to the multicast addr [ 1750.670975][T14750] IPVS: stop unused estimator thread 0... [ 1750.693028][ T5454] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1750.726924][ T2820] syzkaller0: entered promiscuous mode [ 1750.728628][ T2820] syzkaller0: entered allmulticast mode [ 1750.744377][ T2676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.807779][ T2676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.814376][T27161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.817410][T27161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.825222][T27161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.827521][T27161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.308787][T31385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.546609][T32654] Bluetooth: hci1: command tx timeout [ 1751.739597][ T2835] CIFS: Attempting to mount //127.0.0.1/share [ 1751.936791][ T2835] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 1751.956589][ T2835] ------------[ cut here ]------------ [ 1751.959752][ T2835] server->in_flight == 0 [ 1751.959764][ T2835] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1213/0x1790, CPU#0: syz.4.7154/2835 [ 1751.964847][ T2835] Modules linked in: [ 1751.966649][ T2835] CPU: 0 UID: 0 PID: 2835 Comm: syz.4.7154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1751.970255][ T2835] Tainted: [L]=SOFTLOCKUP [ 1751.971625][ T2835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1751.974221][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.976011][ T2835] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1751.980096][ T2835] Code: c6 e8 51 3b b7 fe 84 db 0f 85 0a fb ff ff e8 34 41 b7 fe 48 8d 3d 0d d3 d7 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 1e 41 b7 fe 90 <0f> 0b 90 0f b6 05 06 0b b8 0d 31 ff 89 c6 88 44 24 28 e8 16 3b b7 [ 1751.986981][ T2835] RSP: 0000:ffffc900051872b8 EFLAGS: 00010287 [ 1751.988920][ T2835] RAX: 0000000000003bbb RBX: ffff888023db4300 RCX: ffffc90028062000 [ 1751.991440][ T2835] RDX: 0000000000080000 RSI: ffffffff83526b42 RDI: ffff88802a544a80 [ 1751.994064][ T2835] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 SYZFAIL: failed to recv rpc [ 1751.997001][ T2835] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900051874f8 [ 1751.999731][ T2835] R13: 0000000000000200 R14: 0000000000000001 R15: ffff888023db4000 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1752.002303][ T2835] FS: 0000000000000000(0000) GS:ffff888096be3000(0063) knlGS:00000000f545db40 [ 1752.005247][ T2835] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1752.007783][ T2835] CR2: 000000000c36412d CR3: 000000006ff88000 CR4: 0000000000352ef0 [ 1752.010294][ T2835] Call Trace: [ 1752.011439][ T2835] [ 1752.012425][ T2835] ? compound_send_recv+0xee0/0x2a10 [ 1752.014100][ T2835] compound_send_recv+0x1030/0x2a10 [ 1752.016674][ T2835] ? __pfx_compound_send_recv+0x10/0x10 [ 1752.019012][ T2835] ? crng_fast_key_erasure+0x1d6/0x260 [ 1752.021311][ T2835] ? lock_acquire+0x1b9/0x370 [ 1752.023117][ T2835] ? rcu_is_watching+0x12/0xc0 [ 1752.024641][ T2835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.026515][ T2835] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1752.028593][ T2835] ? cifs_strtoUTF16+0x283/0x3e0 [ 1752.030169][ T2835] ? find_held_lock+0x2b/0x80 [ 1752.031721][ T2835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1752.033695][ T2835] cifs_send_recv+0x43/0x60 [ 1752.035200][ T2835] SMB2_negotiate+0x15c4/0x5380 [ 1752.036761][ T2835] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1752.038765][ T2835] ? smb2_negotiate+0x57/0x80 [ 1752.040200][ T2835] ? smb2_negotiate+0x57/0x80 [ 1752.041700][ T2835] ? do_raw_spin_unlock+0x145/0x1e0 [ 1752.044052][ T2835] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1752.045881][ T2835] cifs_negotiate_protocol+0x268/0x4c0 [ 1752.047633][ T2835] cifs_get_smb_ses+0xfc9/0x2170 [ 1752.049390][ T2835] cifs_mount_get_session+0xf8/0x460 [ 1752.051189][ T2835] dfs_mount_share+0x200/0x1e20 [ 1752.052912][ T2835] ? __pfx_dfs_mount_share+0x10/0x10 [ 1752.054811][ T2835] ? __pfx___schedule+0x10/0x10 [ 1752.056248][ T2835] ? irqentry_exit+0x24d/0xa00 [ 1752.057799][ T2835] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.059997][ T2835] cifs_mount+0xc4/0xdb0 [ 1752.061358][ T2835] ? __pfx_cifs_mount+0x10/0x10 [ 1752.063141][ T2835] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 1752.064889][ T2835] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1752.066562][ T2835] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1752.068402][ T2835] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1752.070996][ T2835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.073085][ T2835] smb3_get_tree+0x1fd/0x440 [ 1752.074590][ T2835] vfs_get_tree+0x92/0x320 [ 1752.076004][ T2835] vfs_cmd_create+0xd7/0x2a0 [ 1752.077463][ T2835] __do_sys_fsconfig+0x55a/0xcb0 [ 1752.079045][ T2835] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1752.080824][ T2835] ? xfd_validate_state+0x129/0x190 [ 1752.082677][ T2835] __do_fast_syscall_32+0xe7/0x970 [ 1752.084626][ T2835] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.086514][ T2835] do_fast_syscall_32+0x32/0x70 [ 1752.088101][ T2835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1752.090137][ T2835] RIP: 0023:0xf706efec [ 1752.091530][ T2835] Code: Unable to access opcode bytes at 0xf706efc2. [ 1752.093687][ T2835] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 1752.096293][ T2835] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000006 [ 1752.098758][ T2835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.101261][ T2835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.103930][ T2835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.106421][ T2835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.108890][ T2835] [ 1752.110004][ T2835] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1752.112423][ T2835] CPU: 0 UID: 0 PID: 2835 Comm: syz.4.7154 Tainted: G L syzkaller #0 PREEMPT(full) [ 1752.115888][ T2835] Tainted: [L]=SOFTLOCKUP [ 1752.117280][ T2835] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1752.120433][ T2835] Call Trace: [ 1752.121493][ T2835] [ 1752.122483][ T2835] dump_stack_lvl+0x100/0x190 [ 1752.124011][ T2835] vpanic+0x552/0x970 [ 1752.125295][ T2835] ? __pfx_vpanic+0x10/0x10 [ 1752.126755][ T2835] panic+0xd1/0xe0 [ 1752.127946][ T2835] ? __pfx_panic+0x10/0x10 [ 1752.129360][ T2835] check_panic_on_warn.cold+0x19/0x34 [ 1752.131071][ T2835] ? smb2_add_credits+0x1213/0x1790 [ 1752.132762][ T2835] __warn.cold+0x191/0x318 [ 1752.134658][ T2835] __report_bug+0x30f/0x440 [ 1752.136382][ T2835] ? smb2_add_credits+0x1213/0x1790 [ 1752.138018][ T2835] ? __pfx___report_bug+0x10/0x10 [ 1752.139614][ T2835] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.141303][ T2835] ? irqentry_exit+0x24d/0xa00 [ 1752.142857][ T2835] ? smb2_add_credits+0x1213/0x1790 [ 1752.144518][ T2835] ? smb2_add_credits+0x1213/0x1790 [ 1752.146465][ T2835] report_bug+0xb2/0x220 [ 1752.148239][ T2835] ? smb2_add_credits+0x1213/0x1790 [ 1752.150069][ T2835] handle_bug+0x16a/0x2a0 [ 1752.151760][ T2835] exc_invalid_op+0x17/0x50 [ 1752.153654][ T2835] asm_exc_invalid_op+0x1a/0x20 [ 1752.155659][ T2835] RIP: 0010:smb2_add_credits+0x1213/0x1790 [ 1752.158056][ T2835] Code: c6 e8 51 3b b7 fe 84 db 0f 85 0a fb ff ff e8 34 41 b7 fe 48 8d 3d 0d d3 d7 0d 67 48 0f b9 3a e9 f4 fa ff ff e8 1e 41 b7 fe 90 <0f> 0b 90 0f b6 05 06 0b b8 0d 31 ff 89 c6 88 44 24 28 e8 16 3b b7 [ 1752.165746][ T2835] RSP: 0000:ffffc900051872b8 EFLAGS: 00010287 [ 1752.167793][ T2835] RAX: 0000000000003bbb RBX: ffff888023db4300 RCX: ffffc90028062000 [ 1752.170625][ T2835] RDX: 0000000000080000 RSI: ffffffff83526b42 RDI: ffff88802a544a80 [ 1752.173498][ T2835] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1752.176173][ T2835] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc900051874f8 [ 1752.178688][ T2835] R13: 0000000000000200 R14: 0000000000000001 R15: ffff888023db4000 [ 1752.181177][ T2835] ? smb2_add_credits+0x1212/0x1790 [ 1752.182899][ T2835] ? smb2_add_credits+0x1212/0x1790 [ 1752.184558][ T2835] ? compound_send_recv+0xee0/0x2a10 [ 1752.186234][ T2835] compound_send_recv+0x1030/0x2a10 [ 1752.187908][ T2835] ? __pfx_compound_send_recv+0x10/0x10 [ 1752.189640][ T2835] ? crng_fast_key_erasure+0x1d6/0x260 [ 1752.191382][ T2835] ? lock_acquire+0x1b9/0x370 [ 1752.193134][ T2835] ? rcu_is_watching+0x12/0xc0 [ 1752.194672][ T2835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.196541][ T2835] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1752.198331][ T2835] ? cifs_strtoUTF16+0x283/0x3e0 [ 1752.199886][ T2835] ? find_held_lock+0x2b/0x80 [ 1752.201364][ T2835] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1752.203277][ T2835] cifs_send_recv+0x43/0x60 [ 1752.204724][ T2835] SMB2_negotiate+0x15c4/0x5380 [ 1752.206279][ T2835] ? __pfx_SMB2_negotiate+0x10/0x10 [ 1752.207950][ T2835] ? smb2_negotiate+0x57/0x80 [ 1752.209443][ T2835] ? smb2_negotiate+0x57/0x80 [ 1752.210972][ T2835] ? do_raw_spin_unlock+0x145/0x1e0 [ 1752.212844][ T2835] ? cifs_negotiate_protocol+0x268/0x4c0 [ 1752.215093][ T2835] cifs_negotiate_protocol+0x268/0x4c0 [ 1752.216834][ T2835] cifs_get_smb_ses+0xfc9/0x2170 [ 1752.218437][ T2835] cifs_mount_get_session+0xf8/0x460 [ 1752.220089][ T2835] dfs_mount_share+0x200/0x1e20 [ 1752.221621][ T2835] ? __pfx_dfs_mount_share+0x10/0x10 [ 1752.223317][ T2835] ? __pfx___schedule+0x10/0x10 [ 1752.224866][ T2835] ? irqentry_exit+0x24d/0xa00 [ 1752.226409][ T2835] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.228061][ T2835] cifs_mount+0xc4/0xdb0 [ 1752.229403][ T2835] ? __pfx_cifs_mount+0x10/0x10 [ 1752.230953][ T2835] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 1752.232859][ T2835] ? cifs_setup_cifs_sb+0x519/0x8d0 [ 1752.234516][ T2835] cifs_smb3_do_mount+0x2c0/0x1b20 [ 1752.236133][ T2835] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 1752.237889][ T2835] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1752.239739][ T2835] smb3_get_tree+0x1fd/0x440 [ 1752.241204][ T2835] vfs_get_tree+0x92/0x320 [ 1752.242663][ T2835] vfs_cmd_create+0xd7/0x2a0 [ 1752.244167][ T2835] __do_sys_fsconfig+0x55a/0xcb0 [ 1752.245733][ T2835] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1752.247482][ T2835] ? xfd_validate_state+0x129/0x190 [ 1752.249119][ T2835] __do_fast_syscall_32+0xe7/0x970 [ 1752.250738][ T2835] ? lockdep_hardirqs_on+0x78/0x100 [ 1752.252423][ T2835] do_fast_syscall_32+0x32/0x70 [ 1752.253998][ T2835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1752.255991][ T2835] RIP: 0023:0xf706efec [ 1752.257439][ T2835] Code: Unable to access opcode bytes at 0xf706efc2. [ 1752.260654][ T2835] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 1752.263310][ T2835] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000006 [ 1752.265805][ T2835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.268290][ T2835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.270755][ T2835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.273200][ T2835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.275652][ T2835] [ 1752.277433][ T2835] Kernel Offset: disabled [ 1752.278844][ T2835] Rebooting in 86400 seconds..